CVE-2013-0861

The CVE-2013-0861 vulnerability affects FFmpeg’s avcodec_decode_audio4 function (libavcodec/utils.c) and allows remote triggers of memory corruption through channel layout vectors. Affected versions are FFmpeg before 1.0.4 and 1.1.x before 1.1.1. Documents consistently describe this as a remote-c...

CVE-2013-0860

The fferframeend function in libavcodec/errorresilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to trigger a NULL pointer dereference via crafted picture data...

CVE-2013-0866

The aacdecodeinit function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large number of channels in an AAC file, which triggers an out-of-bounds array access...

CVE-2013-0868

libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and 1 unchecked return codes from the initvlc function and 2 "len==0 cases."...

CVE-2013-0866

CVE-2013-0866 affects FFmpeg’s libavcodec/aacdec.c (aac_decode_init). The vulnerability arises when parsing AAC files with a very large number of channels, leading to an out-of-bounds array access. Affected versions are FFmpeg before 1.0.4 and 1.1.x before 1.1.2. Impact is remote via crafted AAC ...

CVE-2013-0869

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

CVE-2013-0869

FFmpeg before 1.1.2 is vulnerable to a denial-of-service via field_end() in libavcodec/h264.c when processing crafted H.264 data (SPS/slice mismatch and out-of-bounds access). A patch was released with FFmpeg 1.1.2 and later versions to fix the issue; upgrade to 1.1.2+ or apply the vendor patch. ...

CVE-2013-0863

CVE-2013-0863 : FFmpeg contains a buffer overflow in the rle_decode function (libavcodec/sanm.c) that affects FFmpeg releases before 1.0.4 and 1.1.x before 1.1.2 when processing crafted LucasArts Smush video data. The vulnerability could allow a remote attacker to cause arbitrary code execution o...

CVE-2013-0866

The aacdecodeinit function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large number of channels in an AAC file, which triggers an out-of-bounds array access...

CVE-2013-0865

CVE-2013-0865 affects FFmpeg/libav: the vqa_decode_chunk function in libavcodec/vqavideo.c allows an out-of-bounds write through large cbp0 or cbpz chunks in Westwood VQA video files. The issue is fixed in FFmpeg releases >= 1.0.4 and >= 1.1.2. Remediation is to upgrade FFmpeg/libav to a ve...

CVE-2013-0860

The CVE-2013-0860 vulnerability affects FFmpeg (libavcodec) where ff_er_frame_end in error_resilience.c can fail to verify frame initialization, allowing a remote attacker to trigger a NULL pointer dereference via crafted picture data. Public details indicate the issue exists in FFmpeg before 1.0...

CVE-2013-0867

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access...

CVE-2013-0868

libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and 1 unchecked return codes from the initvlc function and 2 "len==0 cases."...

CVE-2013-0863

Buffer overflow in the rledecode function in libavcodec/sanm.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via crafted LucasArts Smush video data...

CVE-2013-0863

Buffer overflow in the rledecode function in libavcodec/sanm.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via crafted LucasArts Smush video data...

CVE-2013-0862

Multiple integer overflows in the processframeobj function in libavcodec/sanm.c in FFmpeg before 1.1.2 allow remote attackers to have an unspecified impact via crafted image dimensions in LucasArts Smush video data, which triggers an out-of-bounds array access...

CVE-2013-0867

FFmpeg vulnerability CVE-2013-0867: the decode_slice_header function in libavcodec/h264.c before 1.1.2 does not properly validate when the pixel format changes, allowing a remote attacker to trigger an unspecified impact via crafted H.264 video data, related to an out-of-bounds array access. Affe...

CVE-2013-0865

The vqadecodechunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large 1 cbp0 or 2 cbpz chunk in Westwood Studios VQA Video file, which triggers an out-of-bounds write...

CVE-2013-0864

The gifcopyimgrect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "end pointer," which allows remote attackers to have an unspecified impact via crafted GIF data that triggers an out-of-bounds array access...

CVE-2013-0865

The vqadecodechunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large 1 cbp0 or 2 cbpz chunk in Westwood Studios VQA Video file, which triggers an out-of-bounds write...