CVE-2016-7555: Exposure of Sensitive Information to an Unauthorized Actor

The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...

CVE-2016-6881: Undefined Security Weakness

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

CVE-2016-7122: Undefined Security Weakness

The avireadnikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure...

CVE-2016-7905: NULL Pointer Dereference

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

PT-2016-7421

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue allows remote attackers to cause a denial of service by utilizing a crafted AVI file, which results in a NULL pointer being used. This is due to a problem in the read gab2 sub function locat...

PT-2016-7394

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue allows remote attackers to cause a denial of service via a crafted AVI file, specifically through the avi read seek function in libavformat/avidec.c. Recommendations For versions prior to...

PT-2016-3170

Name of the Vulnerable Software and Affected Versions FFmpeg versions 3.3.3 Description The issue is related to the ivr read header function in the FFmpeg multimedia library, specifically in libavformat/rmdec.c, and is caused by resource management errors. Exploitation of this issue can allow a...

Libav 'mov_read_dref' Function Denial of Service Vulnerability

Libav is a cross-platform solution for recording and converting audio and video from the Libav team, and FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in the 'movreaddref' function in the...

DEBIAN-CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

UBUNTU-CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

CVE-2016-3062

The movreaddref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via the entries value in a dref box in an MP4 file...

Integer overflow

Integer overflow in the asfwritepacket function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS aka presentation timestamp value in a .mov file...

CVE-2016-2326

FFmpeg libavformat/asfenc.c contains an integer overflow vulnerability in the asf_write_packet path (FFmpeg before 2.8.5). A remote attacker can exploit a crafted PTS in a .mov to cause a denial of service (and potentially other impact). Affected component: FFmpeg/libavformat. Root cause: overflo...

CVE-2016-2326

Integer overflow in the asfwritepacket function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS aka presentation timestamp value in a .mov file...

PT-2016-1476

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.5 Description The issue is caused by an integer overflow in the asf write packet function in libavformat/asfenc.c. This can be exploited by a remote attacker using a specially crafted PTS value in a .mov file,...

UBUNTU-CVE-2016-2326

Integer overflow in the asfwritepacket function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS aka presentation timestamp value in a .mov file...

CVE-2016-2326

Integer overflow in the asfwritepacket function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS aka presentation timestamp value in a .mov file...

CVE-2014-9676

The segwritepacket function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service "invalid memory handler" and possibly execute arbitrary code via a crafted video that triggers a use after free...

Double free

The segwritepacket function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service "invalid memory handler" and possibly execute arbitrary code via a crafted video that triggers a use after free...

CVE-2014-9676

FFmpeg libavformat/segment.c seg_write_packet (FFmpeg 2.1.4 and earlier) does not free the correct memory, enabling a use-after-free that can cause a denial of service and possibly allow arbitrary code execution via crafted video. Impact is tied to remote attacker access (network) and partial con...