7919 matches found
CVE-2017-7865
FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideodecodeblockopcode0xA function in libavcodec/interplayvideo.c and the avcodecaligndimensions2 function in libavcodec/utils.c...
CVE-2017-7862
FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decodeframe function in libavcodec/pictordec.c...
CVE-2017-7866
Summary : CVE-2017-7866 affects FFmpeg prior to patched builds, with an out-of-bounds write caused by a stack-based buffer overflow in the decode_zbuf path of libavcodec/pngdec.c . This concrete issue was addressed in FFmpeg/OpenSUSE advisories (e.g., openSUSE-2017-631, openSUSE-2017-1067) which ...
CVE-2017-7859
CVE-2017-7859 affects FFmpeg prior to 2017-03-05. The vulnerability is an out-of-bounds write caused by a heap-based buffer overflow in the function ff_h264_slice_context_init (libavcodec/h264dec.c). The available sources describe the issue and its presence across multiple CVE records, but no con...
CVE-2017-7859
FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ffh264slicecontextinit function in libavcodec/h264dec.c...
CVE-2017-7859
FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ffh264slicecontextinit function in libavcodec/h264dec.c...
openSUSE Security Update : ffmpeg (openSUSE-2017-449)
This update for ffmpeg fixes the following issues : Security issue fixed : - CVE-2016-10190: remote code execution vulnerability 1 - libavformat/http.c boo1022920 Detailed ChangeLog : - 3.1.6: https://github.com/FFmpeg/FFmpeg/blob/e08b1cf2df8cfdb339 4aa5ab0320739f8b5a1c4f/Changelog - 3.2.4:...
ffmpeg: Heap-buffer-overflow in av_samples_copy
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6456688074817536 Project: ffmpeg Fuzzer: libFuzzerffmpegAUDIOAVCODECIDAACfuzzer Fuzz target binary: ffmpegAUDIOAVCODECIDAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...
OPENSUSE-SU-2017:0958-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: Security issue fixed: - CVE-2016-10190: remote code execution vulnerability 1 - libavformat/http.c boo1022920 Detailed ChangeLog: - 3.1.6: https://github.com/FFmpeg/FFmpeg/blob/e08b1cf2df8cfdb3394aa5ab0320739f8b5a1c4f/Changelog - 3.2.4:...
OPENSUSE-SU-2017:0961-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: Security issue fixed: - CVE-2016-10190: remote code execution vulnerability 1 - libavformat/http.c boo1022920 Detailed ChangeLog: - 3.1.6: https://github.com/FFmpeg/FFmpeg/blob/e08b1cf2df8cfdb3394aa5ab0320739f8b5a1c4f/Changelog - 3.2.4:...
Remote Code Execution(RCE)
ffmpeg is vulnerable to remote code execution RCE attacks. A heap-based buffer overflow in ffserver.c is caused by the failure to check chunk size mismatches. The resulted buffer overflow can be exploited to launch RCE...
Remote Code Execution (RCE)
ffmpeg is vulnerable to remote code execution RCE attacks. A heap-based buffer overflow in libavformat/rtmppkt.c is caused by the failure to check for RTMP packet size mismatches. The resulted buffer overflow can be exploited by aligning chunks and by using a white-what-where condition to launch...
Remote Code Execution (RCE)
ffmpeg is vulnerable to remote code execution RCE. Wrong usage of strtoll in the httpreadstream function in http.c passes a negative chunksize in chunk encoding. Therefore, it leads to a buffer overflow allocated next to the AVIOContext structure which eventually causes rip control and then code...
ffmpeg: Global-buffer-overflow in ff_h264_filter_mb_fast
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6515070404132864 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDH264fuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDH264fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...
ffmpeg: Global-buffer-overflow in ff_acelp_interpolatef
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4791735110598656 Project: ffmpeg Fuzzer: aflffmpegAUDIOAVCODECIDAMRNBfuzzer Fuzz target binary: ffmpegAUDIOAVCODECIDAMRNBfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overfl...
FFmpeg 'Libavcodec' Remote Code Execution Vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in Libavcodec in FFmpeg versions prior to 0.11. A remote attacker can exploit this vulnerability to cause a denial of service memory corruption and applicati...
CVE-2012-5361
Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file...
CVE-2012-5361
Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file...
