CVE-2016-7499

The sbrmakefmaster function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...

UBUNTU-CVE-2016-7393

Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-8676

The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...

Stack overflow

Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-7477

The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...

CVE-2016-7477

The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...

CVE-2016-8676

The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...

CVE-2016-7393

Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

UBUNTU-CVE-2016-7499

The sbrmakefmaster function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...

CVE-2016-8675

The getvlc2 function in getbits.h in Libav before 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file, possibly related to startcode sequences during m4v detection...

CVE-2016-7393

Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

UBUNTU-CVE-2016-8676

The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...

DEBIAN-CVE-2016-7393

Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-7499

The sbrmakefmaster function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...

CVE-2016-8676

The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...

UBUNTU-CVE-2016-7477

The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...

UBUNTU-CVE-2016-8675

The getvlc2 function in getbits.h in Libav before 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file, possibly related to startcode sequences during m4v detection...

CVE-2016-7477

The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...

CVE-2016-7393

CVE-2016-7393 affects Libav prior to 11.5, where the aac_sync function in libavcodec/aac_parser.c can overflow a stack-based buffer when processing crafted files. This leads to a denial of service via an out-of-bounds read. Affected component/version: Libav before 11.5 (aac_parser.c, aac_sync). T...

CVE-2016-7477

The CVE-2016-7477 entry concerns Libav 11.7. The vulnerable component is the function ff_put_pixels8_xy2_mmx in rnd_template.c, where a crafted mp3 file can trigger a denial of service via invalid memory access that crashes the application. The issue was originally noted as involving a NULL point...