ffmpeg:ffmpeg_dem_FITS_fuzzer: Heap-buffer-overflow in fits_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5129775942991872 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegdemFITSfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer: Heap-buffer-overflow in predict_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5083469356728320 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMOBICLIPfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_dem_ASF_O_fuzzer: Crash in set_language

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6197611002068992 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemASFOfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62400013e860 Crash State:...

TikTok: RCE on TikTok Ads Portal

The video upload endpoint on the TikTok Ads portal was potentially susceptible to remote code execution RCE due to a ffmpeg misconfiguration. We thank @ bubbounty for reporting this to our team and confirming the resolution. During my research on the TikTok Ads portal I found a RCE thought the...

ffmpeg:ffmpeg_AV_CODEC_ID_ADPCM_SWF_fuzzer: Heap-buffer-overflow in adpcm_swf_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5764465137811456 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDADPCMSWFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

ffmpeg:ffmpeg_dem_MPEGTSRAW_fuzzer: Heap-buffer-overflow in mpegts_raw_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6282861159907328 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegdemMPEGTSRAWfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_MAGICYUV_fuzzer: Heap-buffer-overflow in magy_decode_slice

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6005121199374336 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMAGICYUVfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

ffmpeg:ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer: Crash in predict_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5636198112165888 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMOBICLIPfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6210400028ff Crash...

ffmpeg:ffmpeg_dem_VIVIDAS_fuzzer: Heap-buffer-overflow in avio_read

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6581200338288640 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemVIVIDASfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x6150000001e5...

PT-2020-5591

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3.1 Description The issue is related to an out-of-bounds write in the track header function of the libavformat library in FFmpeg, caused by incorrect extradata packing. This can potentially allow a remote attacker to cause a...

ffmpeg:ffmpeg_AV_CODEC_ID_EXR_fuzzer: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5613925708857344 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDEXRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x6170000002cf...

PT-2020-6180

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3.1 Description The issue is related to the decode frame function in the libavcodec/exr.c component, which has an out-of-bounds write due to errors in calculations. This can be exploited by a remote attacker to cause a denial ...

ffmpeg:ffmpeg_dem_OBU_fuzzer: Stack-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5128116420476928 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegdemOBUfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_dem_VIVIDAS_fuzzer: Heap-buffer-overflow in viv_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5723367078100992 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemVIVIDASfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6090000001c0...

ffmpeg:ffmpeg_AV_CODEC_ID_MAGICYUV_fuzzer: Heap-buffer-overflow in magy_decode_slice

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5742553675333632 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMAGICYUVfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

ffmpeg:ffmpeg_dem_VIVIDAS_fuzzer: Stack-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5721057325219840 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemVIVIDASfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_CRI_fuzzer: Heap-buffer-overflow in unpack_10bit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5161495882891264 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDCRIfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7f513aa7828...

ffmpeg:ffmpeg_AV_CODEC_ID_SMVJPEG_fuzzer: Global-buffer-overflow in build_vlc

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5198809526960128 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSMVJPEGfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_MOBICLIP_fuzzer: Heap-buffer-overflow in predict_motion

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5688995402743808 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMOBICLIPfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer: Index-out-of-bounds in vector_pow43

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5724825462767616 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACFIXEDfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cras...