PT-2018-3991

Name of the Vulnerable Software and Affected Versions FFmpeg versions through 3.4.2 Description The issue is related to the svg probe function in the libavformat/img2dec.c component of the FFmpeg library. It allows remote attackers to cause a denial of service due to an infinite loop via a crafte...

ClipBucket < 4.0.0 - Release 4902 - Command Injection / File Upload / SQL Injection Vulnerabiliti

Exploit for php platform in category web applications ======================================================================= title: OS command injection, arbitrary file upload & SQL injection product: ClipBucket vulnerable version: 4.0.0 - Release 4902 fixed version: 4.0.0 - Release 4902 CVE...

ffmpeg/ffmpeg_AV_CODEC_ID_TRUEHD_fuzzer: Index-out-of-bounds in generate_2_noise_channels

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5191383498358784 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDTRUEHDfuzzer Fuzz target binary: ffmpegAVCODECIDTRUEHDfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

CVE-2018-7557

The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...

CVE-2018-7557

The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...

UBUNTU-CVE-2018-7557

The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...

CVE-2018-7557

The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...

CVE-2018-7557

CVE-2018-7557 affects FFmpeg (libavcodec/utvideodec.c: decode_init) in FFmpeg versions 2.8 through 3.4.2. A crafted AVI file with specific chroma subsampling dimensions can trigger a denial of service via an out-of-bounds/out-of-array read. Connected sources confirm the component and root cause b...

CVE-2018-7557

The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...

CVE-2018-7557

The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...

CVE-2018-7557

The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...

PT-2018-18154

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.8 through 3.4.2 Description The issue allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data. This is due to a problem in the decode init...

CVE-2018-7557: Out-of-bounds Read

The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...

ffmpeg/ffmpeg_AV_CODEC_ID_INDEO4_fuzzer: Index-out-of-bounds in decode_band_hdr

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4787296550256640 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDINDEO4fuzzer Fuzz target binary: ffmpegAVCODECIDINDEO4fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_FIC_fuzzer: Heap-buffer-overflow in fic_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6317064647081984 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDFICfuzzer Fuzz target binary: ffmpegAVCODECIDFICfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_SCPR_fuzzer: Heap-buffer-overflow in decompress_p

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6289698747056128 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDSCPRfuzzer Fuzz target binary: ffmpegAVCODECIDSCPRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...

openSUSE Security Update : ffmpeg (openSUSE-2018-172)

This update for ffmpeg fixes the following issues : Updated ffmpeg to new bugfix release 3.4.2 - Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. - avfilter/vftranspose: Fix used plane count boo1078488, CVE-2018-6392 - avcodec/utvideodec: Fix bytes lef...

OPENSUSE-SU-2018:0470-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: Updated ffmpeg to new bugfix release 3.4.2 Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. avfilter/vftranspose: Fix used plane count boo1078488, CVE-2018-6392 avcodec/utvideodec: Fix bytes left check...

OPENSUSE-SU-2018:0476-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: Updated ffmpeg to new bugfix release 3.4.2 Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. avfilter/vftranspose: Fix used plane count boo1078488, CVE-2018-6392 avcodec/utvideodec: Fix bytes left check...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because an out-of-array read can occur when the decodeplane function in libavcodec/utvideodec.c, when processing an AVI file, leading to a denial of service attack...