ffmpeg:ffmpeg_BSF_HEVC_METADATA_fuzzer: Index-out-of-bounds in cbs_h265_read_slice_segment_header

Detailed Report: https://oss-fuzz.com/testcase?key=6261760693370880 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFHEVCMETADATAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: cbsh265readslicesegmentheader...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in dng_decode_jpeg

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6326925027704832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Crash in cfhd_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4855119863349248 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62e000072208...

ffmpeg:ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Heap-buffer-overflow in filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5683161103859712 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Stack-use-after-return in output_configure

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4825489219518464 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACLATMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-use-after-return READ 1 Crash...

Denial Of Service (DoS)

ffmpeg is vulnerable to Denial Of Service DoS. The aareadheader in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables...

Arbitrary Code Execution

FFmpeg is vulnerable to arbitrary code execution. A use-after-free bug occurs via a crafted EXTINF duration in an m3u8 file because parseplaylist in libavformat/hls.c frees a pointer later access that pointer in avprobeinputformat3 in libavformat/format.c...

Denial Of Service (DoS)

FFmpeg is vulnerable to Denial Of Service DoS. The avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

Denial Of Service (DoS)

FFmpeg is vulnerable to heap-based buffer overflow in aviogetstr in libavformat/aviobuf.c because dnnbackendnative.c calls ffdnnloadmodelnative and a certain index check is omitted...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS. There is a division by zero at adxwritetrailer in libavformat/rawenc.c...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_fuzzer: Index-out-of-bounds in output_configure

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5245171336478720 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Heap-buffer-overflow in filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5148519623819264 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDCFHDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6220000000d...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_fuzzer: Heap-buffer-overflow in jpegNUMBER_decode_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5700973918683136 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDJPEG2000fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in tiff_decode_tag

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4843529818603520 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

[ASA-202007-4] ffmpeg: arbitrary code execution

Arch Linux Security Advisory ASA-202007-4 ========================================= Severity: High Date : 2020-07-31 CVE-ID : CVE-2020-13904 Package : ffmpeg Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1180 Summary ======= The package ffmpeg before versi...

GLSA-202007-58 : FFmpeg: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-58 FFmpeg: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_fuzzer: Heap-buffer-overflow in jpegNUMBER_read_main_headers

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5165847820369920 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDJPEG2000fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Addres...

Debian DLA-2291-1 : ffmpeg security update

Several vulnerabilities have been fixed by upgrading FFmpeg, a widely used multimedia framework, from 3.2.14 to 3.2.15. CVE-2019-13390 rawenc: Only accept the appropriate stream type for raw muxers. CVE-2019-17542 Heap-based buffer overflow in vqadecodechunk. CVE-2020-13904 Use-after-free via a...

FFmpeg: Multiple vulnerabilities

Background FFmpeg is a complete, cross-platform solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for...

Debian: Security Advisory (DLA-2291-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...