7918 matches found
CVE-2016-7785
Vulnerability summary (CVE-2016-7785): FFmpeg’s avi_read_seek in libavformat/avidec.c is vulnerable to crafted AVI files, causing a denial of service via an assertion fault. Affected: FFmpeg versions prior to 3.1.4. Impact described in multiple advisories and CVE records; exploit details focus on...
CVE-2016-9561
The checonfigure function in libavcodec/aacdectemplate.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service allocation of huge memory, and being killed by the OS via a crafted MOV file...
CVE-2016-8595
The gsmparse function in libavcodec/gsmparser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...
CVE-2016-7502
The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...
CVE-2016-7122
The avireadnikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure...
CVE-2016-7122
The CVE-2016-7122 entry concerns FFmpeg. The vulnerability is in the function avi_read_nikon of libavformat/avidec.c, affecting FFmpeg before 3.1.4, and is triggered when decoding an AVI file containing a crafted 'nctg' structure, leading to an infinite loop. Several connected sources (NVD, CNVD,...
CVE-2016-8595
CVE-2016-8595 affects FFmpeg’s gsm_parse in libavcodec/gsm_parser.c, where parsing a crafted AVI can trigger an assertion fault and cause DoS. Affected versions are FFmpeg before 3.1.5. The core issue is in the GSM parsing path; exploitation, workflow, or in-the-wild details are not provided beyo...
CVE-2016-7562
The ffdrawpcfont function in libavcodec/cgadata.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service buffer overflow via a crafted AVI file...
CVE-2016-7450
The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...
CVE-2016-7502
The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...
CVE-2016-7785
The avireadseek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...
CVE-2016-6881
The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...
CVE-2016-9561
CVE-2016-9561 : FFmpeg’s libavcodec/aacdec_template.c che_configure function allowed remote attackers to trigger a denial-of-service via a crafted MOV file by allocating a huge amount of memory. Affected: FFmpeg prior to 3.2.1 (as stated in the CVE description). Connected references confirm this ...
CVE-2016-7905
FFmpeg vulnerability CVE-2016-7905 affects the read_gab2_sub function in libavformat/avidec.c, where a crafted AVI file can trigger a NULL pointer dereference leading to a denial of service. Affected versions are FFmpeg before 3.1.4. The issue has been reported across multiple advisories (NVD ent...
CVE-2016-6881
This CVE refers to FFmpeg before 3.1.3, where the zlib_refill function in libavformat/swfdec.c can trigger an infinite loop DoS via a crafted SWF file. Affected software is FFmpeg; the root cause is an issue in zlib_refill handling within SWF decoding. Documented impact is denial of service with ...
CVE-2016-7502
The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...
CVE-2016-7785
The avireadseek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...
CVE-2016-7905
The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...