Lucene search
+L

8003 matches found

ossfuzz
ossfuzz
added 2019/11/01 4:11 p.m.17 views

ffmpeg:ffmpeg_AV_CODEC_ID_DST_fuzzer: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5117679320432640 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDDSTfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x628000003f00...

6.8AI score
SaveExploits0Affected Software1
Packet Storm
Packet Storm
added 2019/10/30 12:00 a.m.188 views

iSeeQ Hybrid DVR WH-H4 1.03R / 2.0.0.P (get_jpeg) Stream Disclosure

!/bin/bash iSeeQ Hybrid DVR WH-H4 1.03R / 2.0.0.P getjpeg Stream Disclosure Vendor: iSeeQ Product web page: http://www.iseeq.co.kr Affected version: WH-H4 1.03R / 2.0.0.P Summary: The 4/8/16 channel hybrid standalone DVR delivers high quality pictures which adopts high performance video processin...

7.4AI score
SaveExploits0
ossfuzz
ossfuzz
added 2019/10/24 2:08 a.m.16 views

ffmpeg:ffmpeg_AV_CODEC_ID_AGM_fuzzer: Heap-buffer-overflow in copy_block8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5749038406434816 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAGMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6290000d16e0...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2019/10/23 7:02 p.m.14 views

ffmpeg:ffmpeg_AV_CODEC_ID_AGM_fuzzer: Heap-buffer-overflow in decode_inter_plane

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5670636394905600 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAGMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2019/10/22 9:52 a.m.21 views

ffmpeg:ffmpeg_AV_CODEC_ID_WMAV2_fuzzer: Heap-use-after-free in get_bits1

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5675574936207360 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDWMAV2fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x61900017ae0...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2019/10/22 4:57 a.m.23 views

ffmpeg:ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer: Index-out-of-bounds in decode_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6210814364614656 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWMALOSSLESSfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2019/10/21 4:59 a.m.21 views

ffmpeg:ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Index-out-of-bounds in decodeplane8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5767030560522240 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDIFFILBMfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2019/10/20 7:18 a.m.21 views

ffmpeg:ffmpeg_AV_CODEC_ID_WMAV1_fuzzer: Heap-buffer-overflow in ff_wma_run_level_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5769439500304384 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWMAV1fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

6.8AI score
SaveExploits0Affected Software1
OSV
OSV
added 2019/10/19 2:15 p.m.10 views

CVE-2019-18214

The VideoConverter app 0.1.0 for Nextcloud allows denial of service CPU and memory consumption via multiple concurrent conversions because many FFmpeg processes may be running at once. The workload is not queued for serial execution...

7.7CVSS7.1AI score
SaveExploits0References1
NVD
NVD
added 2019/10/19 2:15 p.m.20 views

CVE-2019-18214

The VideoConverter app 0.1.0 for Nextcloud allows denial of service CPU and memory consumption via multiple concurrent conversions because many FFmpeg processes may be running at once. The workload is not queued for serial execution...

7.7CVSS7.5AI score0.01388EPSS
SaveExploits1References1
Prion
Prion
added 2019/10/19 2:15 p.m.16 views

Design/Logic Flaw

The VideoConverter app 0.1.0 for Nextcloud allows denial of service CPU and memory consumption via multiple concurrent conversions because many FFmpeg processes may be running at once. The workload is not queued for serial execution...

6.8CVSS7.5AI score0.01388EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2019/10/19 1:32 p.m.24 views

CVE-2019-18214

The VideoConverter app 0.1.0 for Nextcloud allows denial of service CPU and memory consumption via multiple concurrent conversions because many FFmpeg processes may be running at once. The workload is not queued for serial execution...

7.7CVSS7.5AI score0.01388EPSS
SaveExploits1References1
CVE
CVE
added 2019/10/19 1:32 p.m.126 views

CVE-2019-18214

The CVE-2019-18214 entry concerns the Video_Converter app 0.1.0 for Nextcloud. The underlying issue is a denial-of-service condition caused by running many FFmpeg processes concurrently; the workload is not serialized, allowing CPU and memory usage to spike. Affected component is the Video_Conver...

7.7CVSS7.4AI score0.01388EPSS
SaveExploits1References1Affected Software1
ossfuzz
ossfuzz
added 2019/10/19 6:25 a.m.25 views

ffmpeg:ffmpeg_AV_CODEC_ID_COOK_fuzzer: Index-out-of-bounds in interpolate_float

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5641398941908992 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDCOOKfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2019/10/18 8:08 p.m.24 views

ffmpeg:ffmpeg_AV_CODEC_ID_ATRAC3P_fuzzer: Index-out-of-bounds in decode_channel_wordlen

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5643794862571520 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDATRAC3Pfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2019/10/18 10:07 a.m.21 views

ffmpeg:ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Global-buffer-overflow in dequantize

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5641113058148352 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDATRAC9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

6.8AI score
SaveExploits0Affected Software1
Veracode
Veracode
added 2019/10/18 8:14 a.m.30 views

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS. The vulnerability is possible because it causes an out-of-array access in the function vqadecodeinit of vqavideo.c, leading to a buffer overflow in vqadecodechunk...

9.8CVSS4AI score0.02305EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/10/15 12:00 a.m.27 views

SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2019:1299-2)

This update for ffmpeg fixes the following issues : Security issue fixed : CVE-2018-14395: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a DoS bsc1101889 CVE-2018-14394: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a D...

6.5CVSS6.1AI score0.02035EPSS
SaveExploits0References7
OSV
OSV
added 2019/10/14 3:51 p.m.9 views

SUSE-SU-2019:1299-2 Security update for ffmpeg

This update for ffmpeg fixes the following issues: Security issue fixed: - CVE-2018-14395: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a DoS bsc1101889 - CVE-2018-14394: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a...

6.5CVSS6.5AI score0.02035EPSS
SaveExploits0References5
OSV
OSV
added 2019/10/14 2:15 a.m.3 views

DEBIAN-CVE-2019-17539

In FFmpeg before 4.2, avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

9.8CVSS6.9AI score0.02029EPSS
SaveExploits0References1
Rows per page
Query Builder