CVE-2017-14169

In the mxfreadprimerpack function in libavformat/mxfdec.c in FFmpeg 3.3.3 - 2.4, an integer signedness error might occur when a crafted file, which claims a large "itemnum" field such as 0xffffffff, is provided. As a result, the variable "itemnum" turns negative, bypassing the check for a large...

Denial Of Service (DoS) Via High CPU And Memory Consumption

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check for an EOF End of File inside the loop in the cinereadheader function. This leads to high CPU and memory consumption when a malicious CINE file with a large duration field in the header...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check the maximum number of times an insufficient list can be reloaded in readdata function of libavformat/hls.c, leading to infinite loops...

Denial Of Service (DoS) Via High CPU And Memory Consumption

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check for an EOF End of File in the asfreadmarker function. This leads to high CPU and memory consumption when a malicious ASF file with a large namelen or count field in the header but witho...

Denial Of Service (DoS) Via High CPU And Memory Consumption

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check for an EOF End of File in the rl2readheader function of libavformat/rl2.c. This leads to high CPU and memory consumption when a malicious RL2 file with a large framecount field in the...

Denial Of Service (DoS) Via High CPU And Memory Consumption

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check for an EOF End of File in the ivrreadheader function of libavformat/rmdec.c. This leads to high CPU and memory consumption when a malicious IVR file with a large len field in the header...

Ffmpeg 'asf_read_marker()' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'asfreadmarker' function in FFmpeg version 3.3.3, which stems from the program's failure to adequately detect EOF End of File. The vulnerability can b...

Ffmpeg 'rl2_read_header()' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'rl2readheader' function in the libavformat/rl2.c file in FFmpeg version 3.3.3, which stems from the program's failure to adequately detect EOF End of...

Ffmpeg 'cine_read_header()' function denial of service vulnerability

Fmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'cinereadheader' function in FFmpeg version 3.3.3, which stems from the program's failure to adequately validate the EOF, and can be exploited to cause...

Ffmpeg 'read_data' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'readdata' function in the libavformat/hls.c file in FFmpeg version 3.3.3. A remote attacker can exploit this vulnerability to cause a denial of servi...

Ffmpeg 'mv_read_header()' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'mvreadheader' function in the libavformat/mvdec.c file in FFmpeg version 3.3.3, which stems from the program's failure to adequately detect EOF End o...

FFmpeg 'ivr_read_header()' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ivrreadheader' function in the libavformat/rmdec.c file in FFmpeg version 3.3.3, which stems from the program's failure to adequately detect EOF End ...

CVE-2017-14059

In FFmpeg 3.3.3, a DoS in cinereadheader due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume hu...

CVE-2017-14056

In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2readheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large "framecount" field in the header but does not contain sufficient backing data, is provided, the loops for...

CVE-2017-14058

In FFmpeg 2.4 and 3.3.3, the readdata function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service infinite loop...

Design/Logic Flaw

In FFmpeg 3.3.3, a DoS in asfreadmarker due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "namelen" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name an...

CVE-2017-14054

In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivrreadheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but does not contain sufficient backing data, is provided, the first type==4 loop would...

UBUNTU-CVE-2017-14058

In FFmpeg 2.4 and 3.3.3, the readdata function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service infinite loop...

UBUNTU-CVE-2017-14059

In FFmpeg 3.3.3, a DoS in cinereadheader due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume hu...

ALPINE-CVE-2017-14054

In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivrreadheader due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but does not contain sufficient backing data, is provided, the first type==4 loop would...