CVE-2012-2799

Unspecified vulnerability in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "put bit buffer when numsavedbits is reset."...

CVE-2012-2774

The ffMPVframestart function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption via unspecified vectors, related to starting "a frame outside SETUP state."...

CVE-2012-2774

FFmpeg vulnerability CVE-2012-2774 affects libavcodec/mpegvideo.c:ff_MPV_frame_start, with FFmpeg versions before 0.11. Remote memory corruption possible by starting a frame outside the SETUP state. Mitigation: upgrade to FFmpeg 0.11 or later (per public advisories).

CVE-2012-2801

Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes."...

CVE-2012-2786

CVE-2012-2786 is a Libav/FFmpeg vulnerability in the decode_wdlt path (libavcodec/dfa.c) that causes an out-of-bounds write when width/height are not correctly handled. Affected products and versions from connected sources include FFmpeg prior to 0.11 and Libav prior to 0.7.7 (0.7.x) and 0.8.4 (0...

CVE-2012-2788

CVE-2012-2788 affects FFmpeg (libavformat/avidec.c) and Libav; it is caused by an out-of-bounds read in avi_read_packet when a packet is shrunk. The issue is fixed in FFmpeg >=0.11 and Libav 0.7.7/0.8.4 or later (per connected advisories, e.g., avidec: use actually read size instead of request...

CVE-2012-2795

FFmpeg is affected by CVE-2012-2795 in libavcodec/wmalosslessdec.c, where three issues are described: (1) improper handling of the size of mclms arrays, (2) a get_bits(0) scenario in decode_ac_filter, and (3) too many bits processed in decode_channel_residues. Public advisories (Mandriva MDVSA-20...

CVE-2012-2782

Unspecified vulnerability in the decodesliceheader function in libavcodec/h264.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to a "rejected resolution change."...

CVE-2012-2803

Double free vulnerability in the mpegdecodeframe function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value...

CVE-2012-2802

CVE-2012-2802 affects FFmpeg/libavcodec:ac3dec (FFmpeg before 0.11; Libav before 0.8.4) where a vulnerability in ac3_decode_frame can lead to incorrect channel buffer sizing. The root cause is that get_buffer may not allocate a buffer for the correct number of channels, causing out-of-bounds writ...

CVE-2012-2799

FFmpeg before 0.11 contains an unspecified vulnerability in libavcodec/wmalosslessdec.c related to the behavior of the put bit buffer when num_saved_bits is reset. The impact and attack vectors are not clearly defined in the provided sources. The issue is documented across multiple feeds (NVD, Re...

CVE-2012-2801

CVE-2012-2801 is a vulnerability in FFmpeg (libavcodec/avs.c) affecting FFmpeg up to 0.11 and Libav up to 0.7.x before 0.7.7 and 0.8.x before 0.8.4. The issue relates to dimensions handling and “out of array writes” in the AVS path, with unknown impact and attack vectors per the CVE description, ...

CVE-2012-2794

The CVE-2012-2794 entry concerns FFmpeg up to 0.11 and Libav up to 0.7.x before 0.7.7 and 0.8.x before 0.8.4, affecting the indeo5 decoder. The root issue is in decode_mb_info where the allocated tile size may not match the parameters, allowing a mis-sized write into the tile data. This is descri...

CVE-2012-2804

CVE-2012-2804 describes an unspecified vulnerability in libavcodec/indeo3.c affecting FFmpeg up to 0.11 and Libav up to 0.8.5, with an issue related to the reallocation code affecting luma height/width. The connected docs identify FFmpeg/Libav as the affected software and reference multiple vendo...

CVE-2012-2797

CVE-2012-2797 affects FFmpeg (libavcodec/mpegaudiodec.c) prior to 0.11 and Libav prior to 0.8.5. The issue is caused by a calculation that prevents a frame from being ‘large enough,’ as described in the initial document; no public exploit/vector details are provided here. Several connected adviso...

CVE-2012-2796

Unspecified vulnerability in the vc1decodeframe function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to inconsistencies in "coded slice positions and interlacing" that trigger "out of array writes."...

CVE-2012-2786

Unspecified vulnerability in the decodewdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."...

CVE-2012-2793

CVE-2012-2793 affects FFmpeg up to version 0.11 and Libav up to 0.7.x before 0.7.7 and 0.8.x before 0.8.4, in the lag_decode_zero_run_line function of libavcodec/lagarith.c. The vulnerability is described as an attack related to “too many zeros” with unknown impact and attack vectors in the initi...

CVE-2012-2803

CVE-2012-2803 describes a double-free vulnerability in the FFmpeg/Libav code path, specifically in the mpeg_decode_frame function (libavcodec/mpeg12.c). Affected products include FFmpeg prior to 0.11 and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5. The description notes the impact as unknown,...

CVE-2012-2797

Unspecified vulnerability in the decodeframemp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors related to a calculation that prevents a frame from being "large enough."...