ALPINE-CVE-2017-9992

Heap-based buffer overflow in the decodedds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact vi...

DEBIAN-CVE-2017-9992

Heap-based buffer overflow in the decodedds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact vi...

UBUNTU-CVE-2017-9996

The cdxldecodeframe function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remote attackers to cause a denial of service heap-based buffer overflow and...

UBUNTU-CVE-2017-9992

Heap-based buffer overflow in the decodedds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact vi...

ALPINE-CVE-2017-9996

The cdxldecodeframe function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remote attackers to cause a denial of service heap-based buffer overflow and...

FFmpeg 'decode_dds1' function heap buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A heap buffer overflow vulnerability exists in the 'decodedds1' function in the libavcodec/dfa.c file in FFmpeg. A remote attacker could exploit this vulnerability to cause a denial of...

PT-2017-19324

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.12 FFmpeg versions 3.0.x prior to 3.0.8 FFmpeg versions 3.1.x prior to 3.1.8 FFmpeg versions 3.2.x prior to 3.2.5 FFmpeg versions 3.3.x prior to 3.3.1 Description A heap-based buffer overflow issue exists in the xw...

PT-2017-19325

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.12 FFmpeg versions 3.0.x prior to 3.0.8 FFmpeg versions 3.1.x prior to 3.1.8 FFmpeg versions 3.2.x prior to 3.2.5 FFmpeg versions 3.3.x prior to 3.3.1 Description A heap-based buffer overflow issue exists in the...

PT-2017-19329

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.8.x through 2.8.11 FFmpeg versions 3.0.x through 3.0.7 FFmpeg versions 3.1.x through 3.1.7 FFmpeg versions 3.2.x through 3.2.4 FFmpeg versions 3.3.x through 3.3.0 Description The issue is related to the cdxl decode frame...

PT-2017-19327

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.12 FFmpeg versions 3.0.x prior to 3.0.8 FFmpeg versions 3.1.x prior to 3.1.8 FFmpeg versions 3.2.x prior to 3.2.5 FFmpeg versions 3.3.x prior to 3.3.1 Description The issue allows remote attackers to cause a denial...

PT-2017-19330

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 2017-06-28 Description The issue allows remote attackers to cause a denial of service, resulting in a Segmentation fault, via a crafted file. This is due to a problem in the dwarf decode s leb128 chk function in dwar...

gdal: Crash in bool LercNS::Lerc2::Decode<unsigned char>

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4841642785767424 Project: gdal Fuzzer: libFuzzergdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60b000961178 Crash State: bool LercNS::Lerc2::Decode...

UBUNTU-CVE-2017-9782

JasPer 2.0.12 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted image, related to the jp2decode function in libjasper/jp2/jp2dec.c...

PT-2017-19185

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted image. This is related to the jp2 decode function in...

GNU Binutils 'opcodes/rx-decode.opc' Remote Denial of Service Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. A security vulnerability exists in...

GNU Binutils 'opcodes/rl78-decode.opc' Denial of Service Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. A security vulnerability exists in...

DEBIAN-CVE-2017-9751

opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during...

UBUNTU-CVE-2017-9751

opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during...

DEBIAN-CVE-2017-9750

opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this fil...

UBUNTU-CVE-2017-9750

opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this fil...