CVE-2016-7502

The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...

CVE-2016-7905

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

CVE-2016-7562

The ffdrawpcfont function in libavcodec/cgadata.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service buffer overflow via a crafted AVI file...

CVE-2016-8595

The gsmparse function in libavcodec/gsmparser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

CVE-2016-8595

The gsmparse function in libavcodec/gsmparser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

CVE-2016-7450

The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...

CVE-2016-7555

The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...

CVE-2016-8595

CVE-2016-8595 affects FFmpeg’s gsm_parse in libavcodec/gsm_parser.c, where parsing a crafted AVI can trigger an assertion fault and cause DoS. Affected versions are FFmpeg before 3.1.5. The core issue is in the GSM parsing path; exploitation, workflow, or in-the-wild details are not provided beyo...

CVE-2016-7562: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ffdrawpcfont function in libavcodec/cgadata.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service buffer overflow via a crafted AVI file...

CVE-2016-7122: Undefined Security Weakness

The avireadnikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure...

CVE-2016-7785: Improper Input Validation

The avireadseek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

CVE-2016-7502: Out-of-bounds Read

The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...

CVE-2016-7905: NULL Pointer Dereference

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

CVE-2016-6671: Improper Restriction of Operations within the Bounds of a Memory Buffer

The rawdecode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted SWF file...

CVE-2016-7450: Out-of-bounds Read

The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...

CVE-2016-7555: Exposure of Sensitive Information to an Unauthorized Actor

The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...

PT-2016-7152

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.3 Description The issue allows remote attackers to cause a denial of service via a crafted SWF file, potentially leading to an infinite loop. This is due to a problem in the zlib refill function in...

CVE-2016-6881: Undefined Security Weakness

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

PT-2016-7032

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.2 Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafted SWF file, due to memory corruption in the raw decode function in libavcodec/rawdec.c...

PT-2016-7337

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue arises from the ff log2 16bit c function in libavutil/intmath.h when decoding a malformed AIFF file, leading to out-of-bounds memory reading. Recommendations For versions prior to 3.1.4,...