CVE-2013-0860: Improper Input Validation

The fferframeend function in libavcodec/errorresilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to trigger a NULL pointer dereference via crafted picture data...

CVE-2013-0864: Undefined Security Weakness

The gifcopyimgrect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "end pointer," which allows remote attackers to have an unspecified impact via crafted GIF data that triggers an out-of-bounds array access...

CVE-2013-0866: Improper Restriction of Operations within the Bounds of a Memory Buffer

The aacdecodeinit function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large number of channels in an AAC file, which triggers an out-of-bounds array access...

CVE-2013-0863: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the rledecode function in libavcodec/sanm.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via crafted LucasArts Smush video data...

CVE-2013-0865: Improper Restriction of Operations within the Bounds of a Memory Buffer

The vqadecodechunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large 1 cbp0 or 2 cbpz chunk in Westwood Studios VQA Video file, which triggers an out-of-bounds write...

CVE-2013-0861: Improper Restriction of Operations within the Bounds of a Memory Buffer

The avcodecdecodeaudio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 allows remote attackers to trigger memory corruption via vectors related to the channel layout...

CVE-2013-4263: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavfilter in FFmpeg before 2.0.1 has unspecified impact and remote vectors related to a crafted "plane," which triggers an out-of-bounds heap write...

CVE-2013-0876: Undefined Security Weakness

Multiple integer overflows in the 1 oldcodec37 and 2 oldcodec47 functions in libavcodec/sanm.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via crafted LucasArts Smush data, which triggers an out-of-bounds array access...

CVE-2013-0872: Improper Restriction of Operations within the Bounds of a Memory Buffer

The swrinit function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or unsupported 1 input or 2 output channel layout, related to an out-of-bounds array access...

CVE-2013-0874: Improper Restriction of Operations within the Bounds of a Memory Buffer

The 1 doubles2str and 2 shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via a crafted TIFF image, related to an out-of-bounds array access...

PT-2013-1092

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the decode slice header function in libavcodec/h264.c, which allows remote attackers to have an impact via crafted H.264 data, triggering an out-of-bounds array access. Multiple...

PT-2013-2665

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to the decode slice header function in libavcodec/h264.c, which does not properly check when the pixel format changes. This allows remote attackers to have an unspecified impact v...

CVE-2013-4264: Improper Restriction of Operations within the Bounds of a Memory Buffer

The kempfdecodetile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote attackers to cause a denial of service out-of-bounds heap write via a G2M4 encoded file...

PT-2013-2673

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the old codec37 function in libavcodec/sanm.c, which allows remote attackers to have an impact via crafted LucasArts Smush data. This is due to an out-of-bounds array access wh...

PT-2013-2662

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 FFmpeg versions 1.1.x prior to 1.1.2 Description A buffer overflow issue exists in the rle decode function, located in libavcodec/sanm.c, which can be triggered by crafted LucasArts Smush video data. This allows...

PT-2013-2667

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to an out-of-bounds array access in the field end function in libavcodec/h264.c, which can be triggered by crafted H.264 data, specifically when there is an SPS and slice mismatch...

PT-2013-2661

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is caused by multiple integer overflows in the process frame obj function, which can be triggered by crafted image dimensions in LucasArts Smush video data. This leads to an out-of-bounds...

PT-2013-4925

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.0.1 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap write, via a G2M4 encoded file. This is due to a problem in the kempf decode tile function...

PT-2013-2672

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to multiple integer overflows in the old codec37 and old codec47 functions in libavcodec/sanm.c, which can be triggered by crafted LucasArts Smush data. This leads to an...

CVE-2013-0877: Improper Restriction of Operations within the Bounds of a Memory Buffer

The oldcodec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted LucasArts Smush data that has a large size when decoded, related to an out-of-bounds array access...