CVE-2019-17539

In FFmpeg before 4.2, avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

CVE-2019-17542

FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...

CVE-2019-17542

CVE-2019-17542 is a heap-based buffer overflow in FFmpeg’s vqa_decode_chunk (out-of-array access in vqa_decode_init, libavcodec/vqavideo.c). Multiple advisories confirm the issue and fixes; affected FFmpeg releases prior to the patched version are vulnerable. Mitigation: upgrade FFmpeg to a relea...

CVE-2019-17542

FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...

CVE-2019-17542

FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...

CVE-2019-17542

FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...

FFmpeg Buffer Overflow Vulnerability (CNVD-2020-13570)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A heap buffer overflow vulnerability exists in vqadecodechunk in versions of FFmpeg prior to 4.2, which can be exploited by an attacker to cause a...

CVE-2019-17539: NULL Pointer Dereference

In FFmpeg before 4.2, avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

CVE-2019-17542: Out-of-bounds Write

FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...

FFmpeg Null Pointer Dereference Vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A null pointer dereference vulnerability exists in avcodecopen2 in libavcodec/utils.c in versions of FFmpeg prior to 4.2, which can be exploited b...

PT-2019-6177 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to a division by zero in the filter frame function of the libavfilter/vf lenscorrection.c component. This allows attackers to cause a Denial of Service or potentially gain access to...

PT-2019-6451 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2.1 Description: The issue is related to an integer overflow vulnerability in the filter16 sobel function within the libavfilter/vf convolution.c component of the FFmpeg multimedia library. This vulnerability can be exploited...

PT-2019-6449 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to an integer overflow vulnerability in the filter robert function within the libavfilter/vf convolution.c file of Ffmpeg. This vulnerability allows attackers to cause a Denial of Service...

PT-2019-6448 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2.1 Description: The issue is related to an Integer Overflow vulnerability in the filter sobel function within the libavfilter/vf convolution.c component of the FFmpeg library. This vulnerability can be exploited by attackers...

PT-2019-6196 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to an Integer Overflow vulnerability in the filter16 prewitt function within the libavfilter/vf convolution.c component of the Ffmpeg library. This vulnerability can be exploited by a...

ffmpeg:ffmpeg_AV_CODEC_ID_HCOM_fuzzer: Crash in hcom_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5647235349479424 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHCOMfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002f45db8...

The vulnerability of the FFmpeg multimedia library, related to the assignment of the null pointer, allows a hacker to trigger a service failure.

The vulnerability of the FFmpeg multimedia library relates to the use of a zero pointer when detecting duplicate frames in a single frame incorrectly. Exploiting this vulnerability could allow an attacker to cause a service failure by using specially crafted HEVC data...

ffmpeg:ffmpeg_AV_CODEC_ID_HCOM_fuzzer: Heap-buffer-overflow in hcom_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5634188581011456 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDHCOMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60c000000f1...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBFDK_AAC_fuzzer: Index-out-of-bounds in processDrcTime

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5699860921057280 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cra...

ffmpeg:ffmpeg_AV_CODEC_ID_HCOM_fuzzer: Heap-buffer-overflow in hcom_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5674970478280704 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHCOMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...