PT-2021-4627

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A heap-based Buffer Overflow issue exists in the gaussian blur component of the FFmpeg library, specifically at libavfilter/vf edgedetect.c. This could lead to memory corruption and other potential consequences...

ffmpeg:ffmpeg_AV_CODEC_ID_THP_fuzzer: Heap-buffer-overflow in ljpeg_decode_rgb_scan

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5763147314495488 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTHPfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

Design/Logic Flaw

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

CVE-2019-15942

CVE-2019-15942 affects FFmpeg up to version 4.2. The vulnerability is a condition/branch issue in the H.264 parser (libavcodec/h2645_parse.c) where alloc_rbsp_buffer mishandles rbsp_buffer, resulting in a numeric/conditional jump based on an uninitialized value. This can lead to a crash under cra...

CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

CVE-2019-15942

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

CVE-2019-15942: Unchecked Return Value

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...

PT-2019-14485

Name of the Vulnerable Software and Affected Versions FFmpeg versions through 4.2 Description The issue is related to a "Conditional jump or move depends on uninitialised value" problem in the h2645 parse function. This is caused by the alloc rbsp buffer function in libavcodec/h2645 parse.c...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBFDK_AAC_fuzzer: Index-out-of-bounds in prepareDrcGain

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5708503842291712 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cra...

ffmpeg:ffmpeg_AV_CODEC_ID_VORBIS_fuzzer: Index-out-of-bounds in vorbis_residue_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5157893162139648 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVORBISfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

PT-2019-6402

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description The issue is related to a component of the FFmpeg multimedia library, specifically fftools/cmdutils.c, which is associated with incorrect memory deallocation before removing the last reference. This allows a remo...

ffmpeg:ffmpeg_AV_CODEC_ID_PNG_fuzzer: Crash in av_freep

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5768418552184832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDPNGfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000045dfd0...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBVORBIS_fuzzer: Heap-buffer-overflow in oggpack_read

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5637490098044928 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBVORBISfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in decode_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5762455661182976 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegDEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x60a000000046 Cras...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1IMAGE_fuzzer: Index-out-of-bounds in ff_vc1_pred_mv

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5656105392275456 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1IMAGEfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cras...