7936 matches found
CVE-2018-7557
The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...
CVE-2018-7557
CVE-2018-7557 affects FFmpeg (libavcodec/utvideodec.c: decode_init) in FFmpeg versions 2.8 through 3.4.2. A crafted AVI file with specific chroma subsampling dimensions can trigger a denial of service via an out-of-bounds/out-of-array read. Connected sources confirm the component and root cause b...
PT-2018-18154 · FFmpeg +1 · Ffmpeg +1
Name of the Vulnerable Software and Affected Versions: FFmpeg versions 2.8 through 3.4.2 Description: The issue allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data. This is due to a problem in the decode ini...
ffmpeg/ffmpeg_AV_CODEC_ID_INDEO4_fuzzer: Index-out-of-bounds in decode_band_hdr
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4787296550256640 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDINDEO4fuzzer Fuzz target binary: ffmpegAVCODECIDINDEO4fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...
ffmpeg/ffmpeg_AV_CODEC_ID_FIC_fuzzer: Heap-buffer-overflow in fic_decode_frame
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6317064647081984 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDFICfuzzer Fuzz target binary: ffmpegAVCODECIDFICfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...
ffmpeg/ffmpeg_AV_CODEC_ID_SCPR_fuzzer: Heap-buffer-overflow in decompress_p
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6289698747056128 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDSCPRfuzzer Fuzz target binary: ffmpegAVCODECIDSCPRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...
openSUSE Security Update : ffmpeg (openSUSE-2018-172)
This update for ffmpeg fixes the following issues : Updated ffmpeg to new bugfix release 3.4.2 - Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. - avfilter/vftranspose: Fix used plane count boo1078488, CVE-2018-6392 - avcodec/utvideodec: Fix bytes lef...
OPENSUSE-SU-2018:0476-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: Updated ffmpeg to new bugfix release 3.4.2 Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. avfilter/vftranspose: Fix used plane count boo1078488, CVE-2018-6392 avcodec/utvideodec: Fix bytes left check...
OPENSUSE-SU-2018:0470-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: Updated ffmpeg to new bugfix release 3.4.2 Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. avfilter/vftranspose: Fix used plane count boo1078488, CVE-2018-6392 avcodec/utvideodec: Fix bytes left check...
Denial Of Service (DoS)
FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because an out-of-array read can occur when the decodeplane function in libavcodec/utvideodec.c, when processing an AVI file, leading to a denial of service attack...
CVE-2018-6912
The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...
DEBIAN-CVE-2018-6912
The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...
CVE-2018-6912
The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...
CVE-2018-6912
The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...
CVE-2018-6912
CVE-2018-6912 affects FFmpeg up to 3.4.2 and is caused by the decode_plane function in libavcodec/utvideodec.c that can trigger an out-of-bounds read in a crafted AVI file, leading to a denial of service. Documents do not show exploit details. A remediation indicated by Gentoo GLSA-202003-65 is t...
CVE-2018-6912
The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...
CVE-2018-6912
The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...
CVE-2018-6912
The decodeplane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...
Ffmpeg 'decode_plane' function denial of service vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeplane' function in the libavcodec/utvideodec.c file in FFmpeg 3.4.2 and earlier versions. A remote attacker can exploit this vulnerability to...
