Code injection

The ffvc1mc4mvchroma4 function in libavcodec/vc1mc.c in Libav 12.2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-17127

The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

Code injection

The h264sliceinit function in libavcodec/h264slice.c in Libav 12.2 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted file...

CVE-2017-17130

The fffreepicturetables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to vc1decodeiblocksadv...

CVE-2017-17129

The ffvc1mc4mvchroma4 function in libavcodec/vc1mc.c in Libav 12.2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-17130

The fffreepicturetables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to vc1decodeiblocksadv...

CVE-2017-17130

The fffreepicturetables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to vc1decodeiblocksadv...

CVE-2017-17128

The h264sliceinit function in libavcodec/h264slice.c in Libav 12.2 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted file...

UBUNTU-CVE-2017-17127

The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

UBUNTU-CVE-2017-17128

The h264sliceinit function in libavcodec/h264slice.c in Libav 12.2 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted file...

CVE-2017-17128

Libav 12.2 is affected by a denial‑of‑service in the h264_slice_init function (libavcodec/h264_slice.c). A crafted file can cause a segmentation fault and application crash. Remote exploitation is noted across multiple feeds, but exploitation details, affected platforms, and patch information are...

CVE-2017-17128

The h264sliceinit function in libavcodec/h264slice.c in Libav 12.2 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted file...

CVE-2017-17129

Vulnerability in Libav 12.2: the ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c is exploitable via a crafted VC-1 file, enabling remote attackers to cause a denial of service (segmentation fault and application crash) or potentially other impacts. Affected component: Libav’s libavcodec/vc1...

CVE-2017-17127

CVE-2017-17127 affects Libav (vc1_decode_frame in libavcodec/vc1dec.c) and allows a remote attacker to trigger a denial of service via a crafted file, caused by a NULL pointer dereference in Libav 12.2. The impact is an application crash (availability impact). Connected advisories indicate the is...

CVE-2017-17130

The fffreepicturetables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to vc1decodeiblocksadv...

CVE-2017-17129

The ffvc1mc4mvchroma4 function in libavcodec/vc1mc.c in Libav 12.2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-17127

The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2017-17130

CVE-2017-17130 affects Libav 12.2 via the ff_free_picture_tables function in libavcodec/mpegpicture.c. The vulnerability allows remote attackers to trigger a heap-based buffer overflow and application crash (potentially causing other impact) by processing a crafted file, related to vc1_decode_i_b...

libav denial of service vulnerability (CNVD-2017-36545)

Libav formerly FFmpeg is Libav team's set of cross-platform audio and video can be recorded, converted to a solution, which includes a libavcodec encoder. A security vulnerability exists in the 'smackerdecodetree' function of the libavcodec/smacker.c file in Libav versions 11.11 and earlier, and...

CVE-2017-16803

In Libav through 11.11 and 12.x through 12.1, the smackerdecodetree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service bitstream.c:buildtable out-of-bounds read and application crash via a crafted Smacker stream...