CVE-2013-7021: Undefined Security Weakness

The filterframe function in libavfilter/vffps.c in FFmpeg before 2.1 does not properly ensure the availability of FIFO content, which allows remote attackers to cause a denial of service double free or possibly have unspecified other impact via crafted data...

CVE-2013-7024: Improper Restriction of Operations within the Bounds of a Memory Buffer

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not consider the component number in certain calculations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 dat...

PT-2013-6229

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the rpza decode stream function in libavcodec/rpza.c, which does not properly maintain a pointer to pixel data. This allows remote attackers to cause a denial of service...

PT-2013-6233

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the g2m init buffers function in libavcodec/g2meet.c, which uses an incorrect ordering of arithmetic operations. This can be exploited by remote attackers using crafted Go2Webina...

PT-2013-6238

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted JPEG2000 data, due to the lack of validation of code-block dimension values in...

PT-2013-6228

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the decode slice header function in libavcodec/h264.c, which incorrectly relies on a certain droppable field. This allows remote attackers to cause a denial of service deadlock o...

PT-2013-6237

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted JPEG2000 data in the libavcodec/jpeg2000.c file. Recommendations For versions prior to 2.1, upda...

CVE-2011-4351: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2013-7010: Undefined Security Weakness

Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted data...

CVE-2013-7014: Undefined Security Weakness

Integer signedness error in the addbytesl2c function in libavcodec/pngdsp.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted PNG data...

CVE-2013-7018: Improper Restriction of Operations within the Bounds of a Memory Buffer

libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use of valid code-block dimension values, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...

CVE-2013-7023: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ffcombineframe function in libavcodec/parser.c in FFmpeg before 2.1 does not properly handle certain memory-allocation errors, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted data...

CVE-2011-3950: Undefined Security Weakness

The diracdecodedataunit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via a crafted value in the reference pictures number...

CVE-2013-7016: Improper Restriction of Operations within the Bounds of a Memory Buffer

The getsiz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the expected sample separation, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...

PT-2013-1411

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10 Description The issue is related to the codec get buffer function in ffmpeg.c, which can be exploited by remote attackers through crafted image size vectors, potentially having an unspecified impact. Recommendatio...

CVE-2013-0859

The adddoublesmetadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array access...

CVE-2013-0846

Array index error in the qdm2decodesuperblock function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access...

CVE-2013-0856

The lpcprediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossless Audio Codec ALAC data, related to a large nbsamples value...

DEBIAN-CVE-2013-0850

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an out-of-bounds array access...

CVE-2013-0848

The decodeinit function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access...