113 matches found
PT-2021-28191
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details include the crash type being a Heap-buffer-overflow WRITE and the crash state...
OSV-2021-315 Global-buffer-overflow in Gfx::decode_frame
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30507 Crash type: Global-buffer-overflow READ 4 Crash state: Gfx::decodeframe Gfx::GIFImageDecoderPlugin::frame Gfx::GIFImageDecoderPlugin::bitmap...
OSV-2018-57 Heap-buffer-overflow in read_uncompressed_header
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11523 Crash type: Heap-buffer-overflow READ Crash state: readuncompressedheader av1decodeframeheadersandsetup aomdecodeframefromobus...
PT-2021-27620
Name of the Vulnerable Software and Affected Versions: aom affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the read uncompressed header function, av1 decode frame headers and setup, and aom decode frame fr...
DEBIAN-CVE-2020-35965
decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...
UBUNTU-CVE-2020-35965
decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...
CVE-2020-35965
decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...
PT-2020-6180
Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3.1 Description The issue is related to the decode frame function in the libavcodec/exr.c component, which has an out-of-bounds write due to errors in calculations. This can be exploited by a remote attacker to cause a denial ...
libvpx: Out of bounds read in vp8_decode_frame in decodeframe.c
In vp8decodeframe of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product...
CVE-2020-0245
In DecodeFrameCombinedMode of combineddecode.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-1...
ALPINE-CVE-2020-0034
In vp8decodeframe of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product...
PT-2020-3693
Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 8.1 Description The issue is related to a possible out of bounds read in the vp8 decode frame function due to improper input validation. This could lead to remote information disclosure if error correction is turne...
Libav Heap Buffer Over Read Vulnerability
Libav is an open source audio and video processing tools , providing for conversion , manipulation and streaming of various multimedia formats and protocols cross-platform tools and libraries . A heap buffer over-read vulnerability exists in decodeframe in libavcodec/lcldec.c in Libav 12.3, which...
UBUNTU-CVE-2018-19128
In Libav 12.3, there is a heap-based buffer over-read in decodeframe in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file...
PT-2018-14820
Name of the Vulnerable Software and Affected Versions Libav version 12.3 Description The issue is a heap-based buffer over-read in the decode frame function in libavcodec/lcldec.c, which can be exploited by an attacker to cause a denial-of-service using a crafted avi file. Recommendations For Lib...
PT-2018-14822 · FFmpeg · Libav
Name of the Vulnerable Software and Affected Versions: Libav version 12.3 Description: The issue is related to an invalid memory access in the vc1 decode frame function in libavcodec/vc1dec.c, which can be exploited by attackers to cause a denial-of-service via a crafted aac file. Recommendations...
DEBIAN-CVE-2018-6621
The decodeframe function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...
UBUNTU-CVE-2018-6621
The decodeframe function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...
Ffmpeg 'decode_frame' function denial of service vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeframe' function in the libavcodec/utvideodec.c file in FFmpeg 3.4.1 and earlier versions. A remote attacker can exploit this vulnerability to...