8138 matches found
UBUNTU-CVE-2019-9718
In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...
ffmpeg/ffmpeg_AV_CODEC_ID_IMM4_fuzzer: Heap-buffer-overflow in copy_block16
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5767949648920576 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDIMM4fuzzer Fuzz target binary: ffmpegAVCODECIDIMM4fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...
PT-2021-4535 · FFmpeg +5 · Ffmpeg +5
Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.1 Description: The issue is related to a buffer overflow in the apng do inverse blend component of the Ffmpeg library, which could allow a remote attacker to cause a Denial of Service. Recommendations: For FFmpeg version 4.1,...
ffmpeg/ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Heap-buffer-overflow in ff_mpv_reconstruct_mb
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5408668986638336 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMPEG4fuzzer Fuzz target binary: ffmpegAVCODECIDMPEG4fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overfl...
CVE-2019-1000016
FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbsav1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...
CVE-2019-1000016
FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbsav1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...
CVE-2019-1000016
FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbsav1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...
Input validation
FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbsav1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...
CVE-2019-1000016
FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbsav1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...
CVE-2019-1000016
FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbsav1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...
CVE-2019-1000016
CVE-2019-1000016 affects FFmpeg 4.1: CWE-129 improper validation of array index in libavcodec/cbs_av1.c, enabling Denial of Service via specially crafted AV1 input. The issue is confirmed across multiple feeds (NVD/OSV/SUSE/Ubuntu/PT Security). Fix appears in commit b97a4b658814b2de8b9f2a3bce491c...
CVE-2019-1000016
FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbsav1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...
Flickr: Arbitrary file read via ffmpeg HLS parser at https://www.flickr.com/photos/upload
Summary: FFmpeg is a video and audio software that is used for generating previews and for converting videos. Your current installation allows HLS playlists that contain references to external files, which leads to local file disclosure. Steps to Reproduce: 1.Download the attached file. F413554...
ffmpeg/ffmpeg_AV_CODEC_ID_HYMT_fuzzer: Heap-buffer-overflow in decode_422_bitstream
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5705567736168448 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDHYMTfuzzer Fuzz target binary: ffmpegAVCODECIDHYMTfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...
MGASA-2019-0026 Updated avidemux packages fix security vulnerabilities
The avidemux package has been updated to version 2.7.1. Avidemux includes a bundled copy of the ffmpeg libraries, which have been updated from version 3.3.3 to version 3.3.9, fixing several security issues and other bugs...
Updated avidemux packages fix security vulnerabilities
The avidemux package has been updated to version 2.7.1. Avidemux includes a bundled copy of the ffmpeg libraries, which have been updated from version 3.3.3 to version 3.3.9, fixing several security issues and other bugs...
ffmpeg/ffmpeg_AV_CODEC_ID_HYMT_fuzzer: Crash in ff_add_hfyu_left_pred_bgr32_sse2
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5729689379799040 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDHYMTfuzzer Fuzz target binary: ffmpegAVCODECIDHYMTfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...
ffmpeg/ffmpeg_AV_CODEC_ID_HYMT_fuzzer: Crash in ff_add_left_pred_unaligned_avx2
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5722087214284800 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHYMTfuzzer Fuzz target binary: ffmpegAVCODECIDHYMTfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash...
ffmpeg/ffmpeg_AV_CODEC_ID_HYMT_fuzzer: Crash in ff_add_median_pred_sse2
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5644026183680000 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDHYMTfuzzer Fuzz target binary: ffmpegAVCODECIDHYMTfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...
ffmpeg/ffmpeg_AV_CODEC_ID_HYMT_fuzzer: Crash in decode_slice
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5670984961490944 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHYMTfuzzer Fuzz target binary: ffmpegAVCODECIDHYMTfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash...