FFmpeg security vulnerabilities

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version n6.1.1, which stems from the presence of an integer overflow that could allow an attacker to trigger a denial of service in an application...

Jitsi Meet Video Upload

The vulnerability of the video file exchange function in Jitsi Meet software for conducting video conferences is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to upload arbitrary video files remotely...

CVE-2024-41206

A stack-based buffer over-read in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Information Disclosure via a crafted TS video file...

CVE-2024-49776

A negative-size-param in tsMuxer version nightly-2024-04-05-01-53-02 allows attackers to cause Denial of Service DoS via a crafted TS video file...

CVE-2024-49777

A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service DoS, Information Disclosure and Code Execution via a crafted MKV video file...

CVE-2024-52613

A heap-based buffer under-read in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service DoS via a crafted MOV video file...

CVE-2024-41209

A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service DoS and Code Execution via a crafted MOV video file...

CVE-2024-41217

A heap-based buffer overflow in tsMuxer version nightly-2024-05-10-02-00-45 allows attackers to cause Denial of Service DoS via a crafted MKV video file...

CVE-2024-49778

A heap-based buffer overflow in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service DoS and Code Execution via a crafted MOV video file...

CVE-2024-52613

A heap-based buffer under-read in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service DoS via a crafted MOV video file...

CVE-2024-49778

A heap-based buffer overflow in tsMuxer version nightly-2024-05-12-02-01-18 allows attackers to cause Denial of Service DoS and Code Execution via a crafted MOV video file...

CVE-2024-41206

A stack-based buffer over-read in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Information Disclosure via a crafted TS video file...

CVE-2024-41209

A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service DoS and Code Execution via a crafted MOV video file...

CVE-2024-41206

A stack-based buffer over-read in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Information Disclosure via a crafted TS video file...

CVE-2024-49776

A negative-size-param in tsMuxer version nightly-2024-04-05-01-53-02 allows attackers to cause Denial of Service DoS via a crafted TS video file...

CVE-2024-41206

A stack-based buffer over-read in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Information Disclosure via a crafted TS video file...

CVE-2024-49777

A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service DoS, Information Disclosure and Code Execution via a crafted MKV video file...

CVE-2024-52613

CVE-2024-52613 concerns tsMuxer, where a heap-based buffer under-read in tsMuxer version nightly-2024-05-12-02-01-18 can cause a DoS via a crafted MOV file. The issue affects the tsMuxer component and is documented across multiple feeds (NVD/Red Hat/CVE lists). According to the PT-2024-35398 advi...

CVE-2024-49778

A heap-based buffer overflow exists in tsMuxer version nightly-2024-05-12-02-01-18 , where a buffer copy occurs without checking the input size. An attacker can exploit this by providing a crafted MOV video file to cause a Denial of Service (DoS) or achieve Code Execution . While exploitation is ...

CVE-2024-49777

A heap-based buffer overflow vulnerability exists in tsMuxer version nightly-2024-03-14-01-51-12 . The flaw allows an attacker to trigger a Denial of Service (DoS) , Information Disclosure , and Code Execution by processing a crafted MKV video file . As a temporary workaround, users are advised t...