CVE-2016-7499

CVE-2016-7499 affects Libav 11.7, specifically the sbr_make_f_master function in libavcodec/aacsbr.c . A crafted MP3 file can trigger a divide-by-zero in this routine, leading to a remote denial of service and application crash. Connected documents corroborate the same description across multiple...

CVE-2016-8676

CVE-2016-8676 affects Libav 11.9: the get_vlc2 function in get_bits.h can be triggered by a crafted MP3 to cause a denial-of-service via a NULL pointer dereference leading to a crash. This vulnerability is described as stemming from an incomplete fix for CVE-2016-8675. The connected documents con...

CVE-2016-8675

CVE-2016-8675 affects Libav: the get_vlc2 function in get_bits.h is vulnerable in Libav versions before 11.9, allowing remote attackers to cause a denial of service via a crafted MP3 file, possibly related to startcode sequences during m4v detection. The issue is documented across multiple source...

CVE-2016-8675

The getvlc2 function in getbits.h in Libav before 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file, possibly related to startcode sequences during m4v detection...

CVE-2016-7393

Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-8676

The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...

CVE-2016-7477

The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...

CVE-2016-7393

Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-6832

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

CVE-2016-6832

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

Heap overflow

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

CVE-2016-6832

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

CVE-2016-6832

The CVE-2016-6832 vulnerability affects libav prior to 11.4, where a heap-based buffer overflow in ff_audio_resample (resample.c) can be triggered by vectors related to buffer resizing, potentially causing a denial-of-service (crash). Affected component is the libav stack (ff_audio_resample in re...

CVE-2016-6832

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

CVE-2016-10192

Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size...

Debian DLA-791-1 : libav security update

Multiple integer overflows have been discovered in libav 11.8 and earlier, allowing remote attackers to cause a crash via a crafted MP3 file. For Debian 7 'Wheezy', these problems have been fixed in version 6:0.8.20-0+deb7u1. We recommend that you upgrade your libav packages. NOTE: Tenable Networ...

[SECURITY] [DLA 791-1] libav security update

Package : libav Version : 6:0.8.20-0+deb7u1 CVE ID : CVE-2016-9819 CVE-2016-9820 CVE-2016-9821 CVE-2016-9822 Multiple integer overflows have been discovered in libav 11.8 and earlier, allowing remote attackers to cause a crash via a crafted MP3 file. For Debian 7 "Wheezy", these problems have bee...

DLA-791-1 libav - security update

Bulletin has no description...

Debian DLA-780-1 : libav security update

Multiple vulnerabilities have been found in libav : CVE-2016-7424 The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted MP3 file. No CVE assigned The h264 codec is...

[SECURITY] [DLA 780-1] libav security update

Package : libav Version : 6:0.8.19-0+deb7u1 CVE ID : CVE-2016-7424 Multiple vulnerabilities have been found in libav: CVE-2016-7424 The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and...