Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass an APE file to the application, causing an out-of-array access that can crash the application...

Integer overflow

Integer overflow in the apedecodeframe function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access and application crash or possibly have unspecified other impact via a crafted APE file...

DEBIAN-CVE-2017-11399

Integer overflow in the apedecodeframe function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access and application crash or possibly have unspecified other impact via a crafted APE file...

CVE-2017-11399

Integer overflow in the apedecodeframe function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access and application crash or possibly have unspecified other impact via a crafted APE file...

CVE-2017-11399

Integer overflow in the apedecodeframe function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access and application crash or possibly have unspecified other impact via a crafted APE file...

CVE-2017-11399

CVE-2017-11399 : FFmpeg (versions 2.4–3.3.2) is affected by an integer overflow in the ape_decode_frame function of libavcodec/apedec.c, which can be triggered by a crafted APE file to cause a denial of service (out-of-bounds access and crash) or potentially other impact. The connected advisories...

CVE-2017-11399

Integer overflow in the apedecodeframe function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access and application crash or possibly have unspecified other impact via a crafted APE file...

PT-2017-4347

Name of the Vulnerable Software and Affected Versions: FFmpeg versions 2.4 through 3.3.2 Description: The issue is related to an integer overflow in the ape decode frame function in libavcodec/apedec.c of the FFmpeg library. This can be exploited by a remote attacker using a specially crafted APE...

CVE-2017-11399: Out-of-bounds Read

Integer overflow in the apedecodeframe function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access and application crash or possibly have unspecified other impact via a crafted APE file...

PT-2017-2813

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.4 through 3.3.3 Description The issue is related to the nsv parse NSVf header function in the libavformat/nsvdec.c file of the FFmpeg multimedia library. It is associated with resource management errors. Exploitation of this...

The vulnerability of the mov_build_index function in the FFmpeg multimedia library allows a hacker to cause unpredictable effects.

The vulnerability of the movbuildindex function in the FFmpeg multimedia library is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to exert unpredictable effects using vectors related to the sample size...

ffmpeg: Crash in ff_sbr_hf_apply_noise_3_sse2

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4649584649306112 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAACfuzzer Fuzz target binary: ffmpegAVCODECIDAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash...

OPENSUSE-SU-2017:1765-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: ffmpeg was updated to 2.8.12, fixing a lot of security issues. boo1046211...

ffmpeg: Heap-buffer-overflow in ipvideo_format_10_firstpass

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4755798049685504 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDINTERPLAYVIDEOfuzzer Fuzz target binary: ffmpegAVCODECIDINTERPLAYVIDEOfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

PT-2017-19343

Name of the Vulnerable Software and Affected Versions ffmpeg versions prior to 2.8.12 Description The issue is related to security problems in ffmpeg. The estimated number of potentially affected devices is not specified. Details about real-world incidents where this issue was exploited are not...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to execute arbitrary code

The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, without any data size checking being performed...

The vulnerability in the `libavformat/rtmppkt.c` component of the FFmpeg multimedia library allows a attacker to execute arbitrary code.

The vulnerability of the libavformat/rtmppkt.c component in the FFmpeg multimedia library arises due to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, without any checks for packet size compliance with RTMP...

The vulnerability of the FFmpeg multimedia library’s component allows a hacker to execute arbitrary code.

The vulnerability of the FFmpeg multimedia library’s component is caused by an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using data with incorrect size in the HTTP response...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit

The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the function ipvideodecodeblockopcode0xA in...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit

The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the function ffh264SliceContextInit in libavcodec/h264dec.c...