Design/Logic Flaw

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service overflow, insufficient memory allocation, and segmentation fault or possibly have unspecified other impact via a crafte...

CVE-2018-7339

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service overflow, insufficient memory allocation, and segmentation fault or possibly have unspecified other impact via a crafte...

CVE-2018-7339

Removed by vendor...

CVE-2018-6392

The filterslice function in libavfilter/vftranspose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service out-of-array access via a crafted MP4 file...

CVE-2018-6392

The filterslice function in libavfilter/vftranspose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service out-of-array access via a crafted MP4 file...

DEBIAN-CVE-2018-6392

The filterslice function in libavfilter/vftranspose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service out-of-array access via a crafted MP4 file...

Design/Logic Flaw

The filterslice function in libavfilter/vftranspose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service out-of-array access via a crafted MP4 file...

CVE-2018-6392

The filterslice function in libavfilter/vftranspose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service out-of-array access via a crafted MP4 file...

CVE-2018-6392

CVE-2018-6392 affects FFmpeg (libavfilter/vf_transpose.c: filter_slice). A crafted MP4 can trigger an out-of-bounds access, causing a denial of service. Documented impact: remote attacker could cause DoS; no exploit details provided beyond this. Affected products/versions: FFmpeg up to 3.4.1 per ...

CVE-2018-6392

The filterslice function in libavfilter/vftranspose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service out-of-array access via a crafted MP4 file...

CVE-2018-6392

The filterslice function in libavfilter/vftranspose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service out-of-array access via a crafted MP4 file...

Vulnerability of the mp4ff_read_ctts function in the audio file decoder Freeware Advanced Audio Decoder 2, allowing a hacker to cause a service failure

The vulnerability of the mp4ffreadctts function common/mp4ff/mp4atom.c in the Freeware Advanced Audio Decoder 2 decoder is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted mp4 file...

EulerOS 2.0 SP2 : libvorbis (EulerOS-SA-2018-1019)

According to the version of the libvorbis package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The barknoisehybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service out-of-bounds access and...

FFmpeg Information Disclosure Vulnerability

Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced...

Information Disclosure

FFMpeg is vulnerable to information disclosure. A malicious user can pass a mp4 file to the application to cause a negative size calculation that can disclose sensitive information from the heap...

Integer overflow

Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file...

CVE-2015-1208

Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file...

CVE-2015-1208

Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file...

CVE-2015-1208

Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from heap and/or stack memory via a crafted MP4 file...

CVE-2015-1208

CVE-2015-1208 concerns FFmpeg’s mov_read_default in libavformat/mov.c, where an integer underflow exists in versions before 2.4.6. The vulnerability allows a crafted MP4 file to cause information disclosure by reading sensitive data from heap/stack memory. Several sources (NVD entry, OSS/OSVDB-st...