Null pointer dereference

The avprivdvproducepacket function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application cras...

Out-of-bounds

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service out-of-bounds read and write via a crafted NSV file that triggers "us...

Design/Logic Flaw

The Shorten codec shorten.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary...

Design/Logic Flaw

The ffh264decodeseqparameterset function in h264ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via ...

CVE-2011-3929

The avprivdvproducepacket function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application cras...

CVE-2012-0853

The decodeTonalComponents function in the Actrac3 codec atrac3.c in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service infinite loop...

CVE-2011-3940

CVE-2011-3940 affects FFmpeg and Libav packages where nsvdec.c in libavcodec could trigger an out-of-bounds read/write via a crafted NSV file, leading to a denial of service. Versions impacted include FFmpeg 0.7.x before 0.7.12, FFmpeg 0.8.x before 0.8.11, Libav 0.5.x before 0.5.9, Libav 0.6.x be...

CVE-2011-3936

The dvextractaudio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a craft...

CVE-2011-3952

CVE-2011-3952 affects FFmpeg libavcodec KMVC decoding (decode_init in kmvc.c). According to the initial description, the issue allows a remote attacker to cause a crash (DoS) and possibly execute arbitrary code via a large KMVC palette in a KMVC-encoded file, affecting FFmpeg up to pre-0.10 and L...

CVE-2011-3951

The dpcmdecodeframe function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted stere...

CVE-2012-0853

Technical details are not publicly available in the connected documents; the initial entry lists the Atrac3/FFmpeg Libav issue but no further technical specifics are provided here. Monitor for updates.

CVE-2011-3952

The decodeinit function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large palette size...

CVE-2011-3940

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service out-of-bounds read and write via a crafted NSV file that triggers "us...

CVE-2012-0858

The Shorten codec shorten.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary...

CVE-2011-3951

CVE-2011-3951 affects FFmpeg/Libav: the dpcm_decode_frame function in libavcodec/dpcm.c is vulnerable. Remote attackers could crash the app or execute arbitrary code via a crafted stereo stream. Affected versions: FFmpeg before 0.10; Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7....

CVE-2012-0853

The decodeTonalComponents function in the Actrac3 codec atrac3.c in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service infinite loop...

CVE-2011-3929

The avprivdvproducepacket function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application cras...

CVE-2012-0858

The CVE-2012-0858 family affects FFmpeg’s Shorten codec (shorten.c) in FFmpeg 0.7.x and 0.8.x and Libav 0.5.x–0.8.x, where processing a crafted Shorten file can trigger an invalid free, leading to application crash or possible remote code execution. Affected ranges are FFmpeg: 0.7.x before 0.7.12...

CVE-2012-0859

CVE-2012-0859 affects FFmpeg libavcodec (vorbis.c render_line) prior to 0.9.1, due to an incomplete fix for CVE-2011-3893. A crafted Vorbis file can cause a crash or potentially allow code execution; upgrading FFmpeg to 0.9.1 or later is the documented remediation.

CVE-2011-3936

CVE-2011-3936 affects FFmpeg/libavcodec DV handling. The vulnerability exists in dv_extract_audio() for FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11 and Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, 0.8.x before 0.8.1. It allows remote attackers to trigger an out-of-bounds ...