CVE-2012-2784

Unspecified vulnerability in the decodepic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing in CAVS," a different vulnerability than CVE-2012-2777...

CVE-2012-2804

CVE-2012-2804 describes an unspecified vulnerability in libavcodec/indeo3.c affecting FFmpeg up to 0.11 and Libav up to 0.8.5, with an issue related to the reallocation code affecting luma height/width. The connected docs identify FFmpeg/Libav as the affected software and reference multiple vendo...

CVE-2012-2793

Unspecified vulnerability in the lagdecodezerorunline function in libavcodec/lagarith.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors related to "too many zeros."...

CVE-2012-2804

Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors, related to "reallocation code" and the luma height and width...

CVE-2012-2796

CVE-2012-2796 affects FFmpeg up to 0.11 and Libav up to 0.8.x up to 0.8.4. The vulnerability is in vc1_decode_frame (libavcodec/vc1dec.c), tied to inconsistencies in coded slice positions and interlacing that trigger out-of-bounds writes. The impact is described as complete confidentiality, integ...

CVE-2012-2791

CVE-2012-2791 affects FFmpeg (before 0.11) and Libav (0.7.x before 0.7.7; 0.8.x before 0.8.5) due to unspecified issues in the transform size affecting functions like decode_band_hdr (indeo4.c) and ff_ivi_decode_blocks (ivi_common.c). The vulnerability has network attack vector and can impact con...

CVE-2012-2787

CVE-2012-2787 affects FFmpeg/libav indeo4 decoder. The vulnerability is tied to the decode_frame path in indeo4.c and width/height handling during size changes, with the impact and vectors not fully quantified in the primary entry. Mandriva’s advisory MDVSA-2013:079 confirms CVE-2012-2787 and sta...

CVE-2012-2784

Technical details about CVE-2012-2784 are not publicly provided in the supplied documents. Please monitor for updates from FFmpeg/Libav advisories and related CVE trackers for affected versions, impact, and fixes.

CVE-2012-2772

The CVE-2012-2772 entry affects FFmpeg (before 0.11) and Libav (0.7.x before 0.7.7 and 0.8.x before 0.8.4) due to a bug in ff_rv34_decode_frame in libavcodec/rv34.c. The issue is described as width/height changes when frame threading are involved, with the specific advisory note that rv34 can err...

CVE-2012-2777

CVE-2012-2777 affects FFmpeg before 0.11 and Libav prior to 0.7.7 (0.7.x) and 0.8.4 (0.8.x). The flaw is in the decode_pic function (libavcodec/cavsdec.c) with an unspecified impact and attack vectors, related to width/height changing in CAVS and distinct from CVE-2012-2784. The provided document...

CVE-2012-2789

CVE-2012-2789 affects FFmpeg (before 0.11) and Libav (0.7.x before 0.7.7; 0.8.x before 0.8.4) due to an unspecified vulnerability in avi_read_packet() in libavformat/avidec.c related to a large number of vector coded coefficients (num_vec_coeffs). The advisory provides no explicit impact vector b...

CVE-2012-2798

Unspecified vulnerability in the decodedds1 function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."...

CVE-2012-2801

Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes."...

CVE-2012-2786

CVE-2012-2786 is a Libav/FFmpeg vulnerability in the decode_wdlt path (libavcodec/dfa.c) that causes an out-of-bounds write when width/height are not correctly handled. Affected products and versions from connected sources include FFmpeg prior to 0.11 and Libav prior to 0.7.7 (0.7.x) and 0.8.4 (0...

CVE-2012-2788

CVE-2012-2788 affects FFmpeg (libavformat/avidec.c) and Libav; it is caused by an out-of-bounds read in avi_read_packet when a packet is shrunk. The issue is fixed in FFmpeg >=0.11 and Libav 0.7.7/0.8.4 or later (per connected advisories, e.g., avidec: use actually read size instead of request...

CVE-2012-2775

Root-cause: An unspecified vulnerability in read_var_block_data within FFmpeg’s libavcodec/alsdec.c and Libav’s decoders allows an out-of-bounds write in quant_cof, tied to a large order. Affected versions exist for FFmpeg before 0.11 and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4. Impact is...

CVE-2012-2775

Unspecified vulnerability in the readvarblockdata function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large order and an "out of array write in quantcof."...

CVE-2012-2800

Unspecified vulnerability in the ffiviprocessemptytile function in libavcodec/ivicommon.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors in which the "tile size ... mismatches parameters" and triggers "writing into a too small...

CVE-2012-2794

Unspecified vulnerability in the decodembinfo function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors in which the "allocated tile size ... mismatches parameters."...

CVE-2012-2803

Double free vulnerability in the mpegdecodeframe function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value...