CVE-2018-12458

An improper integer type in the mpeg4encodegopheader function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

CVE-2018-12459

An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

CVE-2018-12458

An improper integer type in the mpeg4encodegopheader function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

CVE-2018-12460

libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, leading to a denial of service, related to idctdsp.c and mpegvideo.c...

Null pointer dereference

libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, leading to a denial of service, related to idctdsp.c and mpegvideo.c...

CVE-2018-12459

CVE-2018-12459 affects FFmpeg 4.0: an inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function (libavcodec/mpeg4videodec.c) may trigger an assertion violation when converting a crafted AVI file to MPEG4, leading to a denial of service. The connected documents provide this...

CVE-2018-12460

CVE-2018-12460 affects FFmpeg 4.0’s libavcodec. The vulnerability is a NULL pointer dereference that may be triggered when the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, leading to a denial of service. Root cause involves code paths in idctdsp.c and mpegv...

CVE-2018-12460

libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, leading to a denial of service, related to idctdsp.c and mpegvideo.c...

CVE-2018-12458

An improper integer type in the mpeg4encodegopheader function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

CVE-2018-12460

libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, leading to a denial of service, related to idctdsp.c and mpegvideo.c...

CVE-2018-12458

FFmpeg vulnerability CVE-2018-12458: An improper integer type in libavcodec/mpeg4videoenc.c (mpeg4_encode_gop_header) can trigger an assertion, leading to denial of service when converting crafted AVI to MPEG4. Affected: FFmpeg 2.8 and 4.0. Public disclosures in multiple feeds (e.g., Debian DSA-4...

CVE-2018-12447

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a heap-based buffer overflow and remote code execution...

CVE-2018-12447

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a heap-based buffer overflow and remote code execution...

Integer overflow

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a heap-based buffer overflow and remote code execution...

CVE-2018-12447

The CVE-2018-12447 vulnerability affects libbpg (and libavcodec) via the restore_tqb_pixels function in hevc_filter.c, where an integer overflow can cause a heap-based buffer overflow and remote code execution. Affected stack includes libbpg 0.9.8 and related products; exact vulnerable lines are ...

CVE-2018-12447

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a heap-based buffer overflow and remote code execution...

UBUNTU-CVE-2018-11224

An issue was discovered in Libav 12.3. A read access violation in the intableinit16 function in libavcodec/aacsbr.c allows remote attackers to cause a denial of service application crash, as demonstrated by avconv...

DEBIAN-CVE-2018-10001

The decodeinit function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via an AVI file...

CVE-2018-10001

The decodeinit function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via an AVI file...

CVE-2018-10001

The decodeinit function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service out of array read via an AVI file...