Lucene search
+L

8 matches found

osv_jlsec
osv_jlsec
•added 2025/10/19 7:08 p.m.•23 views

JLSEC-2025-114 `dwa_uncompress` in `libavcodec/exr.c` in FFmpeg 4.4 allows an out-of-bounds array access because...

dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...

8.8CVSS7.6AI score0.01356EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/19 12:00 a.m.•3 views

PT-2025-45904

dwa uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc count is not strictly checked...

8.8CVSS5.9AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•22 views

OpenEXR File Decoder Heap Buffer Overflow RCE

The vulnerability of the dwauncompress function in the OpenEXR File Decoder component of the FFmpeg multimedia library lies in the fact that the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

6.5CVSS7.6AI score0.00185EPSS
SaveExploits0References6Affected Software4
osv_cve
osv_cve
•added 2025/10/06 8:09 a.m.•15 views

CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...

8.7CVSS6.7AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/10/06 8:09 a.m.•6 views

CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...

8.7CVSS6.5AI score0.00185EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/06 8:09 a.m.•66 views

CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...

8.7CVSS0.00185EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2021/06/03 5:15 p.m.•18 views

UBUNTU-CVE-2021-33815

dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...

8.8CVSS7.3AI score0.01356EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/05/27 12:00 a.m.•4 views

PT-2021-4069

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.4 Description The issue is related to the dwa uncompress function in the libavcodec/exr.c component of the FFmpeg multimedia library. It involves incorrect checking of dc count, which can lead to an out-of-bounds array access...

8.8CVSS0.01356EPSS
SaveExploits0References186
Rows per page
Query Builder