11 matches found
Denial Of Service (DoS)
ffmpeg is vulnerable to denial of service. The vulnerability exists due to a lack of validation of the editable initgetbits return value in adtsdecodeextradata in libavformat/adtsenc.c...
OPENSUSE-SU-2021:3193-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2021-38171: Fixed adtsdecodeextradata in libavformat/adtsenc.c to check the initgetbits return value bsc1189724...
CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
Design/Logic Flaw
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
UBUNTU-CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
FFmpeg 安全漏洞
FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg Ffmpeg team. Ffmpeg suffers from a security vulnerability that stems from adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, a necessary step...
CVE-2021-38171
CVE-2021-38171 affects FFmpeg 4.4 and is described as adts_decode_extradata in libavformat/adtsenc.c not checking the return value of init_get_bits; the second argument to init_get_bits can be crafted. The connected documents confirm this as the root cause, noting that a crafted input could explo...
CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...
CVE-2021-38171
adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...