Design/Logic Flaw

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

PT-2023-11808

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3 Description An issue was discovered in decode frame in libavcodec/tiff.c, allowing remote attackers to cause a denial of service DoS. Recommendations For FFmpeg version 4.3, consider updating to a newer version to mitigate t...

FFmpeg code-related vulnerabilities

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 4.3, which stems from a flaw in the decodeframe function in the libavcodec/tiff.c file. No details of the vulnerability are available at th...

DEBIAN-CVE-2023-32570

VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit...

PT-2023-23880

Name of the Vulnerable Software and Affected Versions VideoLAN dav1d versions prior to 1.2.0 Description The issue is related to a thread task.c race condition that can lead to an application crash. This condition is associated with the dav1d decode frame exit function. Recommendations For versio...

SUSE CVE-2017-7862

FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decodeframe function in libavcodec/pictordec.c...

SUSE CVE-2017-11399

Integer overflow in the apedecodeframe function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service out-of-array access and application crash or possibly have unspecified other impact via a crafted APE file...

SUSE CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

SUSE CVE-2022-1507

chafa: NULL Pointer Dereference in function gifinternaldecodeframe at libnsgif.c:599 allows attackers to cause a denial of service crash via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Pointer Dereference in function gifinternaldecodeframe at...

UBUNTU-CVE-2022-3109

An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability...

PT-2022-37065

Name of the Vulnerable Software and Affected Versions libvp9 affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE and a crash state involving functions such as init mt...

UBUNTU-CVE-2014-125024

A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function lagdecodeframe. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue...

UBUNTU-CVE-2014-125022

A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shortendecodeframe of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this...

FFmpeg buffer error vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A code execution vulnerability exists in the FFmpeg lagdecodeframe function, which could be exploited by attackers to execute arbitrary code on the system...

PT-2022-7784

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A critical issue has been found, affecting the function lag decode frame. This issue leads to memory corruption and can be exploited remotely. Recommendations For FFmpeg version 2.0, it is recommended to apply a...

PT-2022-7782

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A vulnerability was found in the function shorten decode frame of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. Recommendations For...

FFmpeg security vulnerabilities

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A security vulnerability exists in FFmpeg version 2.0, which originates from a memory corruption via the decodeframe function in the libavcodec/ansi.c file...

PT-2022-7771

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A problem has been found in the decode frame function of the libavcodec/ansi.c file. This issue leads to an integer coercion error and can be exploited remotely. Recommendations To fix this issue, it is recommend...

PT-2022-13922

Name of the Vulnerable Software and Affected Versions chafa versions prior to 1.10.2 Description The issue allows attackers to cause a denial of service crash via a crafted input file. This is due to a NULL Pointer Dereference in the gif internal decode frame function at libnsgif.c:599...

PT-2022-6793 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg versions prior to 3.0 Description: An issue was discovered in the FFmpeg package, where the vp3 decode frame function in libavcodec/vp3.c lacks a check of the return value of av malloc, which will cause a null pointer dereference. This...