CVE-2013-0853

The wavpackdecodeframe function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error...

CVE-2013-0855

Integer overflow in the alacdecodeclose function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a large number of samples per frame in Apple Lossless Audio Codec ALAC data, which triggers an out-of-bounds array access...

CVE-2013-0857

The decodeframeilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted height value in IFF PBM/ILBM bitmap data...

CVE-2013-0858

The atrac3decodeinit function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels...

CVE-2013-0859

The adddoublesmetadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array access...

CVE-2013-0846

Array index error in the qdm2decodesuperblock function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access...

CVE-2013-0848

The decodeinit function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access...

CVE-2013-0850

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an out-of-bounds array access...

CVE-2013-0851

The decodeframe function in libavcodec/eamad.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Electronic Arts Madcow video data, which triggers an out-of-bounds array access...

CVE-2013-0854

The mjpegdecodescanprogressiveac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data...

CVE-2013-0856

The lpcprediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossless Audio Codec ALAC data, related to a large nbsamples value...

CVE-2013-0853

CVE-2013-0853 refers to a vulnerability in FFmpeg/libav where the wavpack_decode_frame function in libavcodec/wavpack.c could be triggered by crafted WavPack data, causing an out-of-bounds array access (likely due to an off-by-one error). The issue is exploitable remotely and is due to memory cor...

PT-2013-2651

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the ff id3v2 parse function in libavformat/id3v2.c, which can be exploited by remote attackers via ID3v2 header data. This exploitation triggers an out-of-bounds array access,...

PT-2013-2653

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the roq decode init function in libavcodec/roqvideodec.c, which allows remote attackers to have an unspecified impact via a crafted width or height dimension that is not a multip...

PT-2013-2649

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 Description The issue allows remote attackers to have an unspecified impact via a crafted block length, which triggers an out-of-bounds write in the libavcodec/alsdec.c file. Recommendations For versions prior to...

CVE-2013-0854: Improper Input Validation

The mjpegdecodescanprogressiveac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data...

CVE-2013-0848: Improper Restriction of Operations within the Bounds of a Memory Buffer

The decodeinit function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access...

PT-2013-2657

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the lpc prediction function in libavcodec/alac.c, which can be exploited by remote attackers through crafted Apple Lossless Audio Codec ALAC data. This is specifically related to...

PT-2013-2652

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the decode init function in libavcodec/huffyuv.c, which allows remote attackers to have an unspecified impact via a crafted width in huffyuv data. This occurs when the predictor ...

PT-2013-2654

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the decode frame function in libavcodec/eamad.c, which can be exploited by remote attackers through crafted Electronic Arts Madcow video data. This exploitation triggers an...