CVE-2013-7015: Improper Input Validation

The flashsvdecodeframe function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly validate a certain height value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Flash Screen Video data...

CVE-2013-7011: Improper Restriction of Operations within the Bounds of a Memory Buffer

The readheader function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not prevent changes to global parameters, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted FFV1 data...

CVE-2013-7020: Improper Restriction of Operations within the Bounds of a Memory Buffer

The readheader function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce certain bit-count and colorspace constraints, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted FFV1 data...

PT-2013-6241

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the filter frame function in libavfilter/vf fps.c, which does not properly ensure the availability of FIFO content. This allows remote attackers to cause a denial of service,...

CVE-2013-7009: Improper Restriction of Operations within the Bounds of a Memory Buffer

The rpzadecodestream function in libavcodec/rpza.c in FFmpeg before 2.1 does not properly maintain a pointer to pixel data, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Apple RPZA data...

CVE-2011-3934: Undefined Security Weakness

Double free vulnerability in the vp3updatethreadcontext function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data...

CVE-2011-3946: Undefined Security Weakness

The ffh264decodesei function in libavcodec/h264sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information SEI data, which triggers an infinite loop...

CVE-2013-7019: Improper Input Validation

The getcox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not properly validate the reduction factor, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...

PT-2013-6232

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the get siz function in libavcodec/jpeg2000dec.c, which does not prevent attempts to use non-zero image offsets. This allows remote attackers to cause a denial of service...

CVE-2011-3941: Improper Restriction of Operations within the Bounds of a Memory Buffer

The decodemb function in libavcodec/errorresilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bounds write...

CVE-2013-7008: Undefined Security Weakness

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 2.1 incorrectly relies on a certain droppable field, which allows remote attackers to cause a denial of service deadlock or possibly have unspecified other impact via crafted H.264 data...

PT-2013-1415

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the ff h264 decode sei function in libavcodec/h264 sei.c, which can be exploited by remote attackers through crafted Supplemental enhancement information SEI data. This...

PT-2013-6240

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the read header function in libavcodec/ffv1dec.c, which does not properly enforce certain bit-count and colorspace constraints. This allows remote attackers to cause a denial of...

PT-2013-1416

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the dirac unpack idwt params function in libavcodec/diracdec.c, which can be exploited by remote attackers using crafted Dirac data. This may have an unspecified impact on the...

PT-2013-1411

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the codec get buffer function in ffmpeg.c, which can be exploited by remote attackers through crafted image size vectors, potentially having an unspecified impact. Recommendatio...

PT-2013-6243

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the ff combine frame function in libavcodec/parser.c, which does not properly handle certain memory-allocation errors. This can be exploited by remote attackers using crafted dat...

PT-2013-6230

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to multiple integer signedness errors in the libavcodec/dsputil.c file. This can be exploited by remote attackers using crafted data, potentially leading to a denial of service due ...

PT-2013-6231

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the read header function in libavcodec/ffv1dec.c, which does not prevent changes to global parameters. This allows remote attackers to cause a denial of service out-of-bounds arr...

CVE-2011-3949: Undefined Security Weakness

The diracunpackidwtparams function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Dirac data...

CVE-2011-3935: Undefined Security Weakness

The codecgetbuffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to a crafted image size...