Ffmpeg 'ff_mpeg4_decode_picture_header' Null Pointer Dereference Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffmpeg4decodepictureheader' function in the libavcodec/mpeg4videodec.c file in FFmpeg version 4.0.1, which is caused by the program failing to check...

PT-2018-4003

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.0.1 Description The issue is related to the ff mpeg4 decode picture header function in the libavcodec/mpeg4videodec.c component of the FFmpeg multimedia library. It is caused by a missing check of a profile value...

PT-2018-4004

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0 Description The issue is related to an inconsistent bits-per-sample value in the ff mpeg4 decode picture header function, which may trigger an assertion violation when converting a crafted AVI file to MPEG4. This can lead to...