PT-2026-141074

FFmpeg through 9.0.2 contains a denial of service vulnerability in cbs jpeg assemble fragment that miscounts 0xff stuffing bytes in JPEG scan headers. Attackers can supply a crafted JPEG/MJPEG stream with 0xff in the scan header, triggering an av assert0 abort when CBS-based bitstream filters...

PT-2026-141055

FFmpeg through 9.0.2 contains an integer overflow in cbs jpeg write scan in libavcodec/cbs jpeg.c that causes a heap buffer overflow on 32-bit builds. Attackers can supply a crafted MJPEG/JPEG stream with a scan of 512 MiB or more, processed by CBS bitstream filters like filter units, to corrupt...

UBUNTU-CVE-2020-12284

cbsjpegsplitfragment in libavcodec/cbsjpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEGMARKERSOS handling because of a missing length check...

PT-2019-5409

Name of the Vulnerable Software and Affected Versions FFmpeg versions 4.1 through 4.2.2 Description The issue is related to a heap-based buffer overflow in the cbs jpeg split fragment function during JPEG MARKER SOS handling due to a missing length check. This can lead to a denial of service. The...