CVE-2012-2803

Double free vulnerability in the mpegdecodeframe function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value...

CVE-2012-2802

CVE-2012-2802 affects FFmpeg/libavcodec:ac3dec (FFmpeg before 0.11; Libav before 0.8.4) where a vulnerability in ac3_decode_frame can lead to incorrect channel buffer sizing. The root cause is that get_buffer may not allocate a buffer for the correct number of channels, causing out-of-bounds writ...

CVE-2012-2799

FFmpeg before 0.11 contains an unspecified vulnerability in libavcodec/wmalosslessdec.c related to the behavior of the put bit buffer when num_saved_bits is reset. The impact and attack vectors are not clearly defined in the provided sources. The issue is documented across multiple feeds (NVD, Re...

CVE-2012-2801

CVE-2012-2801 is a vulnerability in FFmpeg (libavcodec/avs.c) affecting FFmpeg up to 0.11 and Libav up to 0.7.x before 0.7.7 and 0.8.x before 0.8.4. The issue relates to dimensions handling and “out of array writes” in the AVS path, with unknown impact and attack vectors per the CVE description, ...

CVE-2012-2794

The CVE-2012-2794 entry concerns FFmpeg up to 0.11 and Libav up to 0.7.x before 0.7.7 and 0.8.x before 0.8.4, affecting the indeo5 decoder. The root issue is in decode_mb_info where the allocated tile size may not match the parameters, allowing a mis-sized write into the tile data. This is descri...

CVE-2012-2804

CVE-2012-2804 describes an unspecified vulnerability in libavcodec/indeo3.c affecting FFmpeg up to 0.11 and Libav up to 0.8.5, with an issue related to the reallocation code affecting luma height/width. The connected docs identify FFmpeg/Libav as the affected software and reference multiple vendo...

CVE-2012-2797

CVE-2012-2797 affects FFmpeg (libavcodec/mpegaudiodec.c) prior to 0.11 and Libav prior to 0.8.5. The issue is caused by a calculation that prevents a frame from being ‘large enough,’ as described in the initial document; no public exploit/vector details are provided here. Several connected adviso...

CVE-2012-2796

Unspecified vulnerability in the vc1decodeframe function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to inconsistencies in "coded slice positions and interlacing" that trigger "out of array writes."...

CVE-2012-2786

Unspecified vulnerability in the decodewdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."...

CVE-2012-2793

CVE-2012-2793 affects FFmpeg up to version 0.11 and Libav up to 0.7.x before 0.7.7 and 0.8.x before 0.8.4, in the lag_decode_zero_run_line function of libavcodec/lagarith.c. The vulnerability is described as an attack related to “too many zeros” with unknown impact and attack vectors in the initi...

CVE-2012-2803

CVE-2012-2803 describes a double-free vulnerability in the FFmpeg/Libav code path, specifically in the mpeg_decode_frame function (libavcodec/mpeg12.c). Affected products include FFmpeg prior to 0.11 and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5. The description notes the impact as unknown,...

CVE-2012-2797

Unspecified vulnerability in the decodeframemp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors related to a calculation that prevents a frame from being "large enough."...

CVE-2012-2804

Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors, related to "reallocation code" and the luma height and width...

CVE-2012-2792

Unspecified vulnerability in the decodeinit function in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the samples per frame...

CVE-2012-2789

Unspecified vulnerability in the avireadpacket function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large number of vector coded coefficients numveccoeffs...

CVE-2012-2772

Unspecified vulnerability in the ffrv34decodeframe function in libavcodec/rv34.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing with frame threading."...

CVE-2012-2790

CVE-2012-2790 affects FFmpeg prior to 0.11 and Libav prior to 0.7.7 (Libav 0.7.x) and 0.8.4 (Libav 0.8.x). The flaw is an unspecified issue in read_var_block_data() within libavcodec/alsdec.c in BGMC mode that can impact decoding samples. Concrete details: the vulnerability is tied to the number ...

CVE-2012-2779

CVE-2012-2779 affects FFmpeg/Libav indeo5 decoding: the issue is in indeo5decode path where decoding could run with a half-initialized context if the GOP header is invalid, leading to potential memory/logic errors. Affected: FFmpeg up to 0.11 and Libav up to 0.8.x prior to their fixes; the docume...

CVE-2012-2783

CVE-2012-2783 is listed among Libav/FFmpeg vulnerabilities (Libav/FFmpeg components). The CVE entry itself notes an unspecified impact related to freeing the returned frame in libavcodec/vp56.c for FFmpeg before 0.11 and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5. Connected sources describe ...

CVE-2012-2775

Root-cause: An unspecified vulnerability in read_var_block_data within FFmpeg’s libavcodec/alsdec.c and Libav’s decoders allows an out-of-bounds write in quant_cof, tied to a large order. Affected versions exist for FFmpeg before 0.11 and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4. Impact is...