CVE-2017-15186

CVE-2017-15186 is a double-free vulnerability in FFmpeg 3.3.4 and earlier that can be exploited remotely by processing a crafted AVI file to cause a denial of service. The connected sources confirm this flaw affects FFmpeg’s AVI handling and was fixed in subsequent releases (e.g., Debian’s FFmpeg...

CVE-2017-15186

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

CVE-2017-15186

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

CVE-2017-15186: Double Free

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

PT-2017-13879

Name of the Vulnerable Software and Affected Versions FFmpeg versions 3.3.4 and earlier Description A double free vulnerability in FFmpeg allows remote attackers to cause a denial of service via a crafted AVI file. This issue can be exploited by providing a specially manipulated AVI file, leading...

Memory Leaks Through Double-free

FFmpeg is vulnerable to memory leaks. These occur through a double-free vulnerability cause when parsing an AVI file to a MKV file using the ffvhuff decoder...

FreeBSD : FFmpeg -- multiple vulnerabilities (ed73829d-af6d-11e7-a633-009c02a2ab30)

FFmpeg security reports : Multiple vulnerabilities have been fixed in FFmpeg 3.3.4. Please refer to the CVE list for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...

ffmpeg: Memcpy-param-overlap in xan_wc3_copy_pixel_run

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6393461273001984 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDXANWC3fuzzer Fuzz target binary: ffmpegAVCODECIDXANWC3fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

Debian DSA-3996-1 : ffmpeg - security update

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed Real, MV, RL2, ASF, Apple HLS, Phantom Cine, MXF, NSV, MOV or RTP H.264 files/streams are processed. %NASLMINLEVEL...

[SECURITY] [DSA 3996-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3996-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 10, 2017 https://www.debian.org/security/faq -...

DSA-3996-1 ffmpeg - security update

Bulletin has no description...

ffmpeg -- multiple vulnerabilities

MITRE reports: Multiple vulnerabilities have been found in FFmpeg. Please refer to CVE list for details. Note: CVE-2017-15186 and CVE-2017-15672 affect only the 3.3 branch before 3.3.5, CVE-2017-16840 and CVE-2017-17081 have been fixed in 3.4.1. They're listed here for completeness of the record...

Debian: Security Advisory (DSA-3996-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ffmpeg: Crash in gmc_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4608518562775040 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMPEG4fuzzer Job Type: libfuzzerasanffmpeg Crash Type: UNKNOWN READ Crash Address: 0x620ffffffbf8 Crash State: gmcmmx gmcmotion...

OPENSUSE-SU-2017:2594-1 Security update for fmpeg

This update for ffmpeg to version 3.3.4 fixes a number of security issues and bugs. This update also adds lame, twolame and SDL2 to the PackageHub as dependencies...

CVE-2017-14796

The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service integer underflow and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copyCTBtohv in hevcfilter.c in libavcodec in...

CVE-2017-14796

The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service integer underflow and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copyCTBtohv in hevcfilter.c in libavcodec in...

CVE-2017-14795

The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service out-of-bounds read and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with hlspcmsample in hevc.c in libavcodec in FFmp...

Integer overflow

The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service integer underflow and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copyCTBtohv in hevcfilter.c in libavcodec in...

PT-2017-19344

Name of the Vulnerable Software and Affected Versions ffmpeg versions prior to 3.3.4 Description The issue concerns a number of security issues and bugs in ffmpeg. Updating to version 3.3.4 fixes these problems. Recommendations For versions prior to 3.3.4, update to version 3.3.4 to resolve the...