EUVD-2012-2782

Malware in sbrugna...

ffmpeg/ffmpeg_AV_CODEC_ID_EAC3_fuzzer: Global-buffer-overflow in ac3_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5851861780267008 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDEAC3fuzzer Fuzz target binary: ffmpegAVCODECIDEAC3fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overfl...

ffmpeg/ffmpeg_AV_CODEC_ID_AC3_fuzzer: Global-buffer-overflow in ac3_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5116430537195520 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDAC3fuzzer Fuzz target binary: ffmpegAVCODECIDAC3fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Cras...

ffmpeg: Index-out-of-bounds in decode_audio_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6455337349545984 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAC3fuzzer Fuzz target binary: ffmpegAVCODECIDAC3fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

CVE-2012-2802

Unspecified vulnerability in the ac3decodeframe function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "number of output channels" and "out of array writes."...

Code injection

Unspecified vulnerability in the ac3decodeframe function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "number of output channels" and "out of array writes."...

CVE-2012-2802

Unspecified vulnerability in the ac3decodeframe function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "number of output channels" and "out of array writes."...

CVE-2012-2802

CVE-2012-2802 affects FFmpeg/libavcodec:ac3dec (FFmpeg before 0.11; Libav before 0.8.4) where a vulnerability in ac3_decode_frame can lead to incorrect channel buffer sizing. The root cause is that get_buffer may not allocate a buffer for the correct number of channels, causing out-of-bounds writ...