Lucene search
+L

483 matches found

Cvelist
Cvelist
•added 2023/01/12 12:00 a.m.•78 views

CVE-2022-3341

A null pointer dereference issue was discovered in 'FFmpeg' in decodemainheader function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformatnewstream and triggers the null pointer dereference error, causing an application to crash...

6.4AI score0.00824EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/09/23 12:00 a.m.•14 views

The vulnerability of the `url_open_dyn_buf_internal` function in the `libavformat/aviobuf.c` file of the multimedia library FFmpeg allows a attacker to cause a service failure.

The vulnerability of the urlopendynbufinternal function in the libavformat/aviobuf.c file of the FFmpeg multimedia library is related to improper memory release before deleting last references. Exploiting this vulnerability allows an attacker to cause service failures remotely...

7.1CVSS6.3AI score0.01039EPSS
SaveExploits1References8Affected Software3
Positive Technologies
Positive Technologies
•added 2022/07/22 12:00 a.m.•13 views

PT-2022-6681 · FFmpeg +6 · Ffmpeg +6

Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: A null pointer dereference issue was discovered in the decode main header function of the libavformat/nutdec.c file. The flaw occurs because the function lacks a check of the return value of...

8.8CVSS6.3AI score0.03764EPSS
SaveExploits2References81
Cvelist
Cvelist
•added 2022/06/18 6:15 a.m.•31 views

CVE-2014-125008 FFmpeg oggparsevorbis.c vorbis_header memory corruption

A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbisheader of the file libavformat/oggparsevorbis.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue...

5.3CVSS5.4AI score0.00678EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/18 12:00 a.m.•4 views

CVE-2014-125008: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbisheader of the file libavformat/oggparsevorbis.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue...

5.5CVSS5.3AI score0.00678EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2022/05/02 12:00 a.m.•12 views

Debian DSA-5126-1 : ffmpeg - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dsa-5126 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc. The descriptive text and...

5.6AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•26 views

Mageia: Security Advisory (MGASA-2014-0473)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.7AI score0.04697EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•27 views

The vulnerability of the adts_decode_extradata function in the libavformat/adtsenc.c component of the FFmpeg multimedia library, related to an unvalidated return value, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the adtsdecodeextradata function in the libavformat/adtsenc.c component of the FFmpeg multimedia library is related to an unvalidated return value of initgetbits. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, compromise its...

9.8CVSS7.7AI score0.02411EPSS
SaveExploits0References11Affected Software4
Veracode
Veracode
•added 2021/10/23 8:41 p.m.•38 views

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The vulnerability exists due to a lack of validation of the editable initgetbits return value in adtsdecodeextradata in libavformat/adtsenc.c...

9.8CVSS7.4AI score0.02411EPSS
SaveExploits0References8Affected Software3
Tenable Nessus
Tenable Nessus
•added 2021/09/24 12:00 a.m.•29 views

openSUSE 15 Security Update : ffmpeg (openSUSE-SU-2021:3193-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3193-1 advisory. - adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the seco...

9.8CVSS7.3AI score0.02411EPSS
SaveExploits0References4
OSV
OSV
•added 2021/09/20 4:15 p.m.•39 views

CVE-2020-20896

An issue was discovered in function latmwritepacket in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference...

8.8CVSS7AI score
SaveExploits0References2
OSV
OSV
•added 2021/09/20 4:15 p.m.•4 views

DEBIAN-CVE-2020-20896

An issue was discovered in function latmwritepacket in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference...

8.8CVSS7.9AI score0.01149EPSS
SaveExploits1References1
Prion
Prion
•added 2021/09/20 4:15 p.m.•20 views

Null pointer dereference

An issue was discovered in function latmwritepacket in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference...

6.8CVSS8.4AI score0.01149EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2021/09/20 3:19 p.m.•127 views

CVE-2020-20896

CVE-2020-20896 affects FFmpeg 4.2.1 (latm_write_packet in libavformat/latmenc.c) and is due to a NULL pointer dereference that can cause a Denial of Service or other unspecified impacts. The Astra Linux advisory and SUSE/OSV records corroborate the issue and note a fixed NULL pointer dereference ...

8.8CVSS8.3AI score0.01149EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2021/09/20 3:19 p.m.•71 views

CVE-2020-20896

An issue was discovered in function latmwritepacket in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference...

8.8CVSS8.6AI score0.01149EPSS
SaveExploits1
Veracode
Veracode
•added 2021/09/03 4:55 p.m.•34 views

Denial Of Service

ffmpeg is vulnerable to denial of service. The vulnerability exists due to a heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg. An attacker is able to crash the system via an avi file...

6.5CVSS3.6AI score0.00924EPSS
SaveExploits1References3Affected Software3
NVD
NVD
•added 2021/08/21 5:15 p.m.•19 views

CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.8CVSS0.02411EPSS
SaveExploits0References6
OSV
OSV
•added 2021/08/21 5:15 p.m.•32 views

CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.8CVSS6.5AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2021/08/21 5:15 p.m.•35 views

CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

9.8CVSS7.4AI score0.02411EPSS
SaveExploits0References5
Prion
Prion
•added 2021/08/21 5:15 p.m.•28 views

Design/Logic Flaw

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

7.5CVSS9.1AI score0.02411EPSS
SaveExploits0References6Affected Software2
Rows per page
Query Builder