Security update for ffmpeg-4 (moderate)

openSUSE Security Update: Security update for ffmpeg-4 Announcement ID: openSUSE-SU-2020:0024-1 Rating: moderate References: 1100345 1133123 1133153 1133155 1149839 Cross-References: CVE-2017-17555 CVE-2018-13305 CVE-2019-11338 CVE-2019-11339 CVE-2019-15942 Affected Products: openSUSE Leap 15.1...

PT-2021-6711 · FFmpeg +3 · Ffmpeg +3

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to a Buffer Overflow in the config input function within the libavfilter/vf gblur.c component of the Ffmpeg library. This allows attackers to potentially cause a Denial of Service or...

ffmpeg:ffmpeg_AV_CODEC_ID_AGM_fuzzer: Heap-buffer-overflow in fill_pixels

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5707525924323328 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAGMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x621000a48880...

ffmpeg:ffmpeg_AV_CODEC_ID_DIRAC_fuzzer: Crash in ff_dequant_subband_32_sse4

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5729372837511168 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDIRACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000bba5000...

ffmpeg:ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Heap-buffer-overflow in decode_ham_plane32

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5675331403120640 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDIFFILBMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address...

ffmpeg:ffmpeg_AV_CODEC_ID_RAWVIDEO_fuzzer: Heap-buffer-overflow in raw_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5074834119983104 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDRAWVIDEOfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Addres...

ffmpeg:ffmpeg_BSF_TRACE_HEADERS_fuzzer: Heap-buffer-overflow in cbs_jpeg_split_fragment

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5673285471961088 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFTRACEHEADERSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5759908398235648 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDIFFILBMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer: Index-out-of-bounds in revert_acfilter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5762574335606784 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWMALOSSLESSfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_AGM_fuzzer: Crash in copy_block8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5644115983466496 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAGMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x628ffffff640...

ffmpeg:ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Global-buffer-overflow in apply_band_extension

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5679823087468544 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDATRAC9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_BSF_MP3_HEADER_DECOMPRESS_fuzzer: Global-buffer-overflow in mp3_header_decompress

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5651002950942720 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFMP3HEADERDECOMPRESSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash...

ffmpeg:ffmpeg_BSF_VP9_METADATA_fuzzer: Heap-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5653911730126848 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFVP9METADATAfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_BSF_HEVC_MP4TOANNEXB_fuzzer: Heap-buffer-overflow in hevc_mp4toannexb_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5169193398042624 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFHEVCMP4TOANNEXBfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Addres...

ffmpeg:ffmpeg_BSF_TRACE_HEADERS_fuzzer: Heap-buffer-overflow in cbs_vp9_split_fragment

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5656106580049920 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFTRACEHEADERSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_BSF_AV1_FRAME_MERGE_fuzzer: Index-out-of-bounds in cbs_av1_read_film_grain_params

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5747424845103104 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFAV1FRAMEMERGEfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1IMAGE_fuzzer: Heap-buffer-overflow in sprite_h_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5389219325542400 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDVC1IMAGEfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2019:3184-1)

This update for ffmpeg fixes the following issues : Security issues fixed : CVE-2019-17542: Fixed a heap-buffer overflow in vqadecodechunk due to an out-of-array access bsc1154064. CVE-2019-12730: Fixed an uninitialized use of variables due to an improper check bsc1137526. CVE-2019-9718: Fixed a...

SUSE-SU-2019:3184-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: Security issues fixed: - CVE-2019-17542: Fixed a heap-buffer overflow in vqadecodechunk due to an out-of-array access bsc1154064. - CVE-2019-12730: Fixed an uninitialized use of variables due to an improper check bsc1137526. - CVE-2019-9718: Fixe...

ffmpeg:ffmpeg_AV_CODEC_ID_V210_fuzzer: Crash in ff_v210_planar_unpack_aligned_avx2

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5637264407527424 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDV210fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x628000030000...