CVE-2014-8545

libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted PNG data...

CVE-2014-8549

libavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted On2 data...

CVE-2014-8546

Integer underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted Cinepak video data...

CVE-2014-8541

libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via...

CVE-2014-8544

CVE-2014-8544 affects FFmpeg (libavcodec/tiff.c) where bits-per-pixel fields are not properly validated. This can enable a remote attacker to trigger a denial of service via crafted TIFF data (out-of-bounds access). The description specifies FFmpeg before 2.4.2 as vulnerable. The provided documen...

CVE-2014-8542

CVE-2014-8542 affects FFmpeg’s libavcodec/utils.c, where a codec ID was omitted during alignment enforcement, enabling a remote attacker to trigger a denial of service via crafted JV data (out-of-bounds access) and potentially other impacts. The initial description specifies FFmpeg prior to 2.4.2...

CVE-2014-8545

CVE-2014-8545 concerns FFmpeg’s libavcodec/pngdec.c, where the code path accepts the monochrome-black format without validating that bits-per-pixel equals 1. This can trigger an out-of-bounds access in crafted PNG data, leading to a potential denial of service (and possibly other impact) as descr...

CVE-2014-8543

libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted MM video data...

CVE-2014-8545

libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted PNG data...

CVE-2014-8542

libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted JV data...

CVE-2014-8543

libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted MM video data...

PT-2014-8607

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted PNG data. This is due to the monochrome-black format being accepted without verifying that the...

CVE-2014-8541

libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via...

PT-2014-8610

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is caused by an off-by-one error in the libavcodec/smc.c file, which can be exploited by remote attackers using crafted Quicktime Graphics aka SMC video data. This can lead to a denial of...

PT-2014-8611

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is related to the handling of On2 data in the libavcodec/on2avc.c file. It does not properly constrain the number of channels, which can lead to out-of-bounds access. This can cause a denial...

PT-2014-8604

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is related to the libavcodec/utils.c file in FFmpeg, where a certain codec ID is not properly enforced during alignment, allowing remote attackers to cause a denial of service out-of-bounds...

PT-2014-8603

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via crafted MJPEG data. This is due to the consideration of only dimension differences, and not...

CVE-2014-8542

libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted JV data...

CVE-2014-8546: Undefined Security Weakness

Integer underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted Cinepak video data...

CVE-2014-8544: Improper Input Validation

libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted TIFF data...