368 matches found
Denial Of Service
ffmpeg is vulnerable to denial of service. The vulnerability exists due to a heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg. An attacker is able to crash the system via an avi file...
CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
Design/Logic Flaw
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
CVE-2021-38171
CVE-2021-38171 affects FFmpeg 4.4 and is described as adts_decode_extradata in libavformat/adtsenc.c not checking the return value of init_get_bits; the second argument to init_get_bits can be crafted. The connected documents confirm this as the root cause, noting that a crafted input could explo...
CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
FFmpeg heap reuse vulnerability after release
FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video, and convert them to streams under the LGPL or GPL license. mpegmuxwritepacket function in libavformat/mpegenc.c in FFmpeg version 4.2 suffers from a heap-release post-reuse vulnerability...
CVE-2020-21697
A heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service DOS via a crafted avi file...
CVE-2020-21697
A heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service DOS via a crafted avi file...
CVE-2020-21697
A heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service DOS via a crafted avi file...
CVE-2020-21697
A heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service DOS via a crafted avi file...
CVE-2020-21697
The CVE-2020-21697 entry concerns FFmpeg 4.2 with a heap-use-after-free in libavformat/mpegenc.c (mpeg_mux_write_packet) that allows denial of service via a crafted AVI file. Connected advisories confirm the issue in FFmpeg 4.2 and reference mitigations/upgrades (e.g., Ubuntu USN entries and Debi...
CVE-2020-21697
A heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service DOS via a crafted avi file...
Security update for ffmpeg (important)
openSUSE Security Update: Security update for ffmpeg Announcement ID: openSUSE-SU-2021:2322-1 Rating: important References: 1172640 1186406 1186583 1186586 1186587 1186596 1186597 1186598 1186600 1186603 1186604 1186605 1186613 1186614 1186615 1186616 1186658 1186660 1186757 1186758 1186762 11867...
Denial Of Service (DoS)
ffmpeg:sid is vulnerable to denial of service. Buffer Overflow vulnerability in FFmpeg n movwritevideotag due to the out of bounds in libavformat/movenc.c could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code...
CVE-2020-22044
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the urlopendynbufinternal function in libavformat/aviobuf.c...