CVE-2012-2791

CVE-2012-2791 affects FFmpeg (before 0.11) and Libav (0.7.x before 0.7.7; 0.8.x before 0.8.5) due to unspecified issues in the transform size affecting functions like decode_band_hdr (indeo4.c) and ff_ivi_decode_blocks (ivi_common.c). The vulnerability has network attack vector and can impact con...

CVE-2012-2787

CVE-2012-2787 affects FFmpeg/libav indeo4 decoder. The vulnerability is tied to the decode_frame path in indeo4.c and width/height handling during size changes, with the impact and vectors not fully quantified in the primary entry. Mandriva’s advisory MDVSA-2013:079 confirms CVE-2012-2787 and sta...

CVE-2012-2784

Technical details about CVE-2012-2784 are not publicly provided in the supplied documents. Please monitor for updates from FFmpeg/Libav advisories and related CVE trackers for affected versions, impact, and fixes.

CVE-2012-2796

Unspecified vulnerability in the vc1decodeframe function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to inconsistencies in "coded slice positions and interlacing" that trigger "out of array writes."...

CVE-2012-2790

Unspecified vulnerability in the readvarblockdata function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to the "number of decoded samples in first sub-block in BGMC mode."...

CVE-2012-2786

Unspecified vulnerability in the decodewdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."...

CVE-2012-2796

Unspecified vulnerability in the vc1decodeframe function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to inconsistencies in "coded slice positions and interlacing" that trigger "out of array writes."...

CVE-2012-2802

Unspecified vulnerability in the ac3decodeframe function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "number of output channels" and "out of array writes."...

CVE-2012-2800

Unspecified vulnerability in the ffiviprocessemptytile function in libavcodec/ivicommon.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors in which the "tile size ... mismatches parameters" and triggers "writing into a too small...

CVE-2012-2799

Unspecified vulnerability in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "put bit buffer when numsavedbits is reset."...

CVE-2012-2789

CVE-2012-2789 affects FFmpeg (before 0.11) and Libav (0.7.x before 0.7.7; 0.8.x before 0.8.4) due to an unspecified vulnerability in avi_read_packet() in libavformat/avidec.c related to a large number of vector coded coefficients (num_vec_coeffs). The advisory provides no explicit impact vector b...

CVE-2012-2774

FFmpeg vulnerability CVE-2012-2774 affects libavcodec/mpegvideo.c:ff_MPV_frame_start, with FFmpeg versions before 0.11. Remote memory corruption possible by starting a frame outside the SETUP state. Mitigation: upgrade to FFmpeg 0.11 or later (per public advisories).

CVE-2012-2795

FFmpeg is affected by CVE-2012-2795 in libavcodec/wmalosslessdec.c, where three issues are described: (1) improper handling of the size of mclms arrays, (2) a get_bits(0) scenario in decode_ac_filter, and (3) too many bits processed in decode_channel_residues. Public advisories (Mandriva MDVSA-20...

CVE-2012-2790

CVE-2012-2790 affects FFmpeg prior to 0.11 and Libav prior to 0.7.7 (Libav 0.7.x) and 0.8.4 (Libav 0.8.x). The flaw is an unspecified issue in read_var_block_data() within libavcodec/alsdec.c in BGMC mode that can impact decoding samples. Concrete details: the vulnerability is tied to the number ...

CVE-2012-2775

Root-cause: An unspecified vulnerability in read_var_block_data within FFmpeg’s libavcodec/alsdec.c and Libav’s decoders allows an out-of-bounds write in quant_cof, tied to a large order. Affected versions exist for FFmpeg before 0.11 and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4. Impact is...

CVE-2012-2792

Unspecified vulnerability in the decodeinit function in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the samples per frame...

CVE-2012-2777

CVE-2012-2777 affects FFmpeg before 0.11 and Libav prior to 0.7.7 (0.7.x) and 0.8.4 (0.8.x). The flaw is in the decode_pic function (libavcodec/cavsdec.c) with an unspecified impact and attack vectors, related to width/height changing in CAVS and distinct from CVE-2012-2784. The provided document...

CVE-2012-2772

The CVE-2012-2772 entry affects FFmpeg (before 0.11) and Libav (0.7.x before 0.7.7 and 0.8.x before 0.8.4) due to a bug in ff_rv34_decode_frame in libavcodec/rv34.c. The issue is described as width/height changes when frame threading are involved, with the specific advisory note that rv34 can err...

CVE-2012-2785

Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors, related to 1 "some subframes only encode some channels" or 2 a large order value...

CVE-2012-2795

Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors related to 1 size of "mclms arrays," 2 "a getbits0 in decodeacfilter," and 3 "too many bits in decodechannelresidues."...