CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

CVE-2018-14395

CVE-2018-14395 affects FFmpeg 3.2 and 4.0.2, where in libavformat/movenc.c a crafted audio file can trigger a divide-by-zero, causing a denial of service (application crash) when converting to MOV audio. Connected advisories confirm fixes in FFmpeg updates (e.g., SUSE SUSE-SU-2019:1299-1/2 and De...

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

CVE-2018-14394

CVE-2018-14394 affects FFmpeg prior to 4.0.2 through the libavformat/movenc.c implementation, where a divide-by-zero in the movenc code path can crash the application when processing a crafted Waveform audio file. This is a DoS vulnerability with potential for an application crash (availability i...

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

Ffmpeg Denial of Service Vulnerability (CNVD-2018-13660)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/movenc.c file in FFmpeg versions prior to 4.0.2. The vulnerability can be exploited by an attacker to cause a denial of service applicatio...

Ffmpeg Denial of Service Vulnerability (CNVD-2018-13661)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/movenc.c file in FFmpeg versions prior to 4.0.2. An attacker can exploit this vulnerability to cause a denial of service application crash...

Debian DSA-4249-1 : ffmpeg - security update

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

[SECURITY] [DSA 4249-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4249-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 17, 2018 https://www.debian.org/security/faq -...

ffmpeg/ffmpeg_AV_CODEC_ID_MP3ADUFLOAT_fuzzer: Heap-use-after-free in av_packet_ref

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5137954375729152 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDMP3ADUFLOATfuzzer Fuzz target binary: ffmpegAVCODECIDMP3ADUFLOATfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-use-after-fre...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service DoS attacks. The library does not properly handle frame types that contain multiple independent substreams in them, allowing a malicious user to pass an AVI file to be converted to an MP4 file that can cause an out-of-array access that can crash the...

DSA-4249-1 ffmpeg - security update

Bulletin has no description...

Debian: Security Advisory (DSA-4249-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service DoS attacks. A malicious user can convert an AVI file to a MP4 file to cause a null pointer dereference through the ffmpeg4decodepictureheader method in mpeg4videodec.c, crashing the application...

ffmpeg/ffmpeg_AV_CODEC_ID_DVDSUB_fuzzer: Heap-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5746777750765568 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDDVDSUBfuzzer Fuzz target binary: ffmpegAVCODECIDDVDSUBfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

FFmpeg vc1_put_blocks_clamped function out-of-bounds access vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. An array out-of-bounds access vulnerability exists in the vc1putblocksclamped function in libavcodec/vc1block.c in FFmpeg 4.0.1 when converting a...

FFmpeg libavcodec/ac3_parser.c file null pointer dereference vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/ac3parser.c file in FFmpeg version 4.0.1, which stems from the program not detecting a failed 'initgetbits8' function call. The vulnerabili...