CVE-2012-2793

CVE-2012-2793 affects FFmpeg up to version 0.11 and Libav up to 0.7.x before 0.7.7 and 0.8.x before 0.8.4, in the lag_decode_zero_run_line function of libavcodec/lagarith.c. The vulnerability is described as an attack related to “too many zeros” with unknown impact and attack vectors in the initi...

CVE-2012-2794

The CVE-2012-2794 entry concerns FFmpeg up to 0.11 and Libav up to 0.7.x before 0.7.7 and 0.8.x before 0.8.4, affecting the indeo5 decoder. The root issue is in decode_mb_info where the allocated tile size may not match the parameters, allowing a mis-sized write into the tile data. This is descri...

CVE-2012-2796

CVE-2012-2796 affects FFmpeg up to 0.11 and Libav up to 0.8.x up to 0.8.4. The vulnerability is in vc1_decode_frame (libavcodec/vc1dec.c), tied to inconsistencies in coded slice positions and interlacing that trigger out-of-bounds writes. The impact is described as complete confidentiality, integ...

CVE-2012-2801

CVE-2012-2801 is a vulnerability in FFmpeg (libavcodec/avs.c) affecting FFmpeg up to 0.11 and Libav up to 0.7.x before 0.7.7 and 0.8.x before 0.8.4. The issue relates to dimensions handling and “out of array writes” in the AVS path, with unknown impact and attack vectors per the CVE description, ...

CVE-2012-2802

CVE-2012-2802 affects FFmpeg/libavcodec:ac3dec (FFmpeg before 0.11; Libav before 0.8.4) where a vulnerability in ac3_decode_frame can lead to incorrect channel buffer sizing. The root cause is that get_buffer may not allocate a buffer for the correct number of channels, causing out-of-bounds writ...

CVE-2012-2788

Unspecified vulnerability in the avireadpacket function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."...

CVE-2012-2794

Unspecified vulnerability in the decodembinfo function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors in which the "allocated tile size ... mismatches parameters."...

CVE-2012-2796

Unspecified vulnerability in the vc1decodeframe function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to inconsistencies in "coded slice positions and interlacing" that trigger "out of array writes."...

CVE-2012-2779

Unspecified vulnerability in the decodeframe function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an invalid "gop header" and decoding in a "half initialized context."...

CVE-2012-2776

Unspecified vulnerability in the decodecelldata function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write."...

CVE-2012-2804

Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors, related to "reallocation code" and the luma height and width...

CVE-2012-2791

Multiple unspecified vulnerabilities in the 1 decodebandhdr function in indeo4.c and 2 ffividecodeblocks function in ivicommon.c in libavcodec/ in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, have unknown impact and attack vectors, related to the "transform size."...

CVE-2012-2786

Unspecified vulnerability in the decodewdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."...

CVE-2012-2795

Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors related to 1 size of "mclms arrays," 2 "a getbits0 in decodeacfilter," and 3 "too many bits in decodechannelresidues."...

CVE-2012-2775

Unspecified vulnerability in the readvarblockdata function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large order and an "out of array write in quantcof."...

CVE-2012-2804

CVE-2012-2804 describes an unspecified vulnerability in libavcodec/indeo3.c affecting FFmpeg up to 0.11 and Libav up to 0.8.5, with an issue related to the reallocation code affecting luma height/width. The connected docs identify FFmpeg/Libav as the affected software and reference multiple vendo...

CVE-2012-2784

Technical details about CVE-2012-2784 are not publicly provided in the supplied documents. Please monitor for updates from FFmpeg/Libav advisories and related CVE trackers for affected versions, impact, and fixes.

CVE-2012-2798

Unspecified vulnerability in the decodedds1 function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."...

CVE-2012-2790

Unspecified vulnerability in the readvarblockdata function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to the "number of decoded samples in first sub-block in BGMC mode."...

CVE-2012-2800

Unspecified vulnerability in the ffiviprocessemptytile function in libavcodec/ivicommon.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors in which the "tile size ... mismatches parameters" and triggers "writing into a too small...