8144 matches found
CVE-2018-9841
CVE-2018-9841 affects FFmpeg up to 3.4.2; the export function in libavfilter/vf_signature.c can be triggered by a long filename to cause a denial of service via out-of-bounds access (unspecified other impact). Public references (NVD, CNVD, OSV, Gentoo GLSA) confirm FFmpeg involvement and 3.4.2 li...
ClipBucket < 4.0.0 - Release 4902 - Command Injection / File Upload / SQL Injection Vulnerabiliti
Exploit for php platform in category web applications ======================================================================= title: OS command injection, arbitrary file upload & SQL injection product: ClipBucket vulnerable version: 4.0.0 - Release 4902 fixed version: 4.0.0 - Release 4902 CVE...
ffmpeg/ffmpeg_AV_CODEC_ID_TRUEHD_fuzzer: Index-out-of-bounds in generate_2_noise_channels
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5191383498358784 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDTRUEHDfuzzer Fuzz target binary: ffmpegAVCODECIDTRUEHDfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...
UBUNTU-CVE-2018-7557
The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...
CVE-2018-7557
The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...
CVE-2018-7557
The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...
CVE-2018-7557
The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...
CVE-2018-7557
The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...
CVE-2018-7557
CVE-2018-7557 affects FFmpeg (libavcodec/utvideodec.c: decode_init) in FFmpeg versions 2.8 through 3.4.2. A crafted AVI file with specific chroma subsampling dimensions can trigger a denial of service via an out-of-bounds/out-of-array read. Connected sources confirm the component and root cause b...
CVE-2018-7557
The decodeinit function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data...
PT-2018-18154 · FFmpeg +1 · Ffmpeg +1
Name of the Vulnerable Software and Affected Versions: FFmpeg versions 2.8 through 3.4.2 Description: The issue allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data. This is due to a problem in the decode ini...
ffmpeg/ffmpeg_AV_CODEC_ID_INDEO4_fuzzer: Index-out-of-bounds in decode_band_hdr
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4787296550256640 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDINDEO4fuzzer Fuzz target binary: ffmpegAVCODECIDINDEO4fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...
ffmpeg/ffmpeg_AV_CODEC_ID_FIC_fuzzer: Heap-buffer-overflow in fic_decode_frame
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6317064647081984 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDFICfuzzer Fuzz target binary: ffmpegAVCODECIDFICfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...
ffmpeg/ffmpeg_AV_CODEC_ID_SCPR_fuzzer: Heap-buffer-overflow in decompress_p
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6289698747056128 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDSCPRfuzzer Fuzz target binary: ffmpegAVCODECIDSCPRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Cras...
openSUSE Security Update : ffmpeg (openSUSE-2018-172)
This update for ffmpeg fixes the following issues : Updated ffmpeg to new bugfix release 3.4.2 - Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. - avfilter/vftranspose: Fix used plane count boo1078488, CVE-2018-6392 - avcodec/utvideodec: Fix bytes lef...
OPENSUSE-SU-2018:0470-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: Updated ffmpeg to new bugfix release 3.4.2 Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. avfilter/vftranspose: Fix used plane count boo1078488, CVE-2018-6392 avcodec/utvideodec: Fix bytes left check...
OPENSUSE-SU-2018:0476-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: Updated ffmpeg to new bugfix release 3.4.2 Fix integer overflows, multiplication overflows, undefined shifts, and verify buffer lengths. avfilter/vftranspose: Fix used plane count boo1078488, CVE-2018-6392 avcodec/utvideodec: Fix bytes left check...
Denial Of Service (DoS)
FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because an out-of-array read can occur when the decodeplane function in libavcodec/utvideodec.c, when processing an AVI file, leading to a denial of service attack...