CVE-2015-8216

The ljpegdecodeyuvscan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted MJPEG data...

CVE-2015-8218

The CVE-2015-8218 issue affects FFmpeg’s libavcodec/faxcompr.c: the decode_uncompressed function does not validate uncompressed runs, enabling a remote attacker to trigger a denial of service via crafted CCITT FAX data (out-of-bounds access). Affected product/version: FFmpeg up to 2.8.1 (prior to...

CVE-2015-8217

The ffhevcparsesps function in libavcodec/hevcps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted High Efficiency Video Coding HEVC da...

CVE-2015-8216

CVE-2015-8216 affects FFmpeg’s libavcodec/mjpegdec.c (ljpeg_decode_yuv_scan). The issue omits width/height checks, allowing remote attackers to cause a denial of service via crafted MJPEG data (out-of-bounds access). Upstream FFmpeg fixed this in version 2.8.2; multiple advisories (openSUSE, Debi...

CVE-2015-8217

The CVE-2015-8217 vulnerability in FFmpeg (libavcodec/hevc_ps.c) arose from not validating the Chroma Format Indicator, allowing a crafted HEVC stream to trigger an out-of-bounds array access and potential DoS. Connected advisories confirm FFmpeg up to version 2.8.2 fixed this issue by adding a c...

CVE-2015-8218

The decodeuncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not validate uncompressed runs, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted CCITT FAX data...

CVE-2015-8216: Undefined Security Weakness

The ljpegdecodeyuvscan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted MJPEG data...

PT-2015-2762

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.2 Description The issue is related to the init tile function in libavcodec/jpeg2000dec.c, which does not properly enforce constraints on tile coordinates. This allows remote attackers to cause a denial of service d...

PT-2015-2760

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.2 Description The issue is related to the ff hevc parse sps function in libavcodec/hevc ps.c, which does not properly validate the Chroma Format Indicator. This allows remote attackers to cause a denial of service,...

CVE-2015-8217: Improper Input Validation

The ffhevcparsesps function in libavcodec/hevcps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted High Efficiency Video Coding HEVC da...

PT-2015-2759

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.2 Description The issue is related to the ljpeg decode yuv scan function in libavcodec/mjpegdec.c, which lacks certain width and height checks. This allows remote attackers to cause a denial of service out-of-bound...

CVE-2015-8218: Improper Input Validation

The decodeuncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not validate uncompressed runs, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted CCITT FAX data...

CVE-2015-8219: Improper Input Validation

The inittile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JP...

CVE-2009-3288

The sgbuildindirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service kernel OOPS and NULL pointer dereference, as demonstrated by using xcdroast to duplicate a CD...

FreeBSD : ffmpeg -- multiple vulnerabilities (3d950687-b4c9-4a86-8478-c56743547af8)

NVD reports : The decodeihdrchunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce uniqueness of the IHDR aka image header chunk in a PNG image, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact v...

CVE-2015-6819

Multiple integer underflows in the ffmjpegdecodeframe function in libavcodec/mjpegdec.c in FFmpeg before 2.7.2 allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted MJPEG data...

Out-of-bounds

The ffsbrapply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a matching AAC frame syntax element before proceeding with Spectral Band Replication calculations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have...

CVE-2015-6819

FFmpeg vulnerability (CVE-2015-6819) in libavcodec/mjpegdec.c: ff_mjpeg_decode_frame suffers multiple integer underflows before 2.7.2, enabling remote attackers to cause a denial of service via crafted MJPEG data (out-of-bounds array access). Impact is a crash or unspecified effects; upgrade to F...

CVE-2015-6820

CVE-2015-6820: In FFmpeg (libavcodec/aacsbr.c, ff_sbr_apply) the code does not verify a matching AAC frame syntax element before performing Spectral Band Replication calculations, enabling potential denial of service via out-of-bounds access from crafted AAC data. Connected sources confirm the ro...

CVE-2015-6820

The ffsbrapply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a matching AAC frame syntax element before proceeding with Spectral Band Replication calculations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have...