PT-2013-1092

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1 Description The issue is related to the decode slice header function in libavcodec/h264.c, which allows remote attackers to have an impact via crafted H.264 data, triggering an out-of-bounds array access. Multiple...

PT-2013-1091

Name of the Vulnerable Software and Affected Versions libav versions prior to 1.0.4 Description The issue concerns multiple vulnerabilities in the libav package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability...

CVE-2013-0862: Undefined Security Weakness

Multiple integer overflows in the processframeobj function in libavcodec/sanm.c in FFmpeg before 1.1.2 allow remote attackers to have an unspecified impact via crafted image dimensions in LucasArts Smush video data, which triggers an out-of-bounds array access...

PT-2013-2672

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to multiple integer overflows in the old codec37 and old codec47 functions in libavcodec/sanm.c, which can be triggered by crafted LucasArts Smush data. This leads to an...

PT-2013-2674

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to an out-of-bounds array access in the advance line function in libavcodec/targa.c, which can be triggered by crafted Targa image data. This allows remote attackers to have an...

PT-2013-2665

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to the decode slice header function in libavcodec/h264.c, which does not properly check when the pixel format changes. This allows remote attackers to have an unspecified impact v...

PT-2013-1097

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 FFmpeg versions 1.1.x prior to 1.1.2 Description The issue is related to the aac decode init function in libavcodec/aacdec.c, which allows remote attackers to have an unspecified impact via a large number of...

CVE-2013-0869: Improper Restriction of Operations within the Bounds of a Memory Buffer

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

PT-2013-2668

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the swr init function in libswresample/swresample.c, which allows remote attackers to have an unspecified impact via an invalid or unsupported input or output channel layout...

PT-2013-2663

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to an incorrect calculation in the gif copy img rect function, which can lead to an out-of-bounds array access when processing crafted GIF data. This can potentially allow remote...

PT-2013-2671

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to an out-of-bounds array access in the ff add png paeth prediction function, which can be exploited by remote attackers using a crafted PNG image. Recommendations For versions...

PT-2013-2670

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the doubles2str and shorts2str functions in libavcodec/tiff.c, which allow remote attackers to have an unspecified impact via a crafted TIFF image. This is due to an...

PT-2013-2667

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to an out-of-bounds array access in the field end function in libavcodec/h264.c, which can be triggered by crafted H.264 data, specifically when there is an SPS and slice mismatch...

CVE-2013-0864: Undefined Security Weakness

The gifcopyimgrect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "end pointer," which allows remote attackers to have an unspecified impact via crafted GIF data that triggers an out-of-bounds array access...

CVE-2013-0874: Improper Restriction of Operations within the Bounds of a Memory Buffer

The 1 doubles2str and 2 shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via a crafted TIFF image, related to an out-of-bounds array access...

CVE-2013-5139

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds array access via a crafted application...

Out-of-bounds

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds array access via a crafted application...

CVE-2013-5139

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds array access via a crafted application...

CVE-2013-5139

The CVE-2013-5139 entry concerns the IOSerialFamily driver. The description (supported by multiple connected records) states that an out-of-bounds array access in IOSerialFamily could allow a crafted application to cause arbitrary code execution or a denial of service. Affected platforms include ...

PT-2013-5385

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue allows attackers to execute arbitrary code or cause a denial of service through an out-of-bounds array access via a crafted application. Recommendations For versions prior to 7, update to...