12 matches found
CLEANSTART-2025-RY07842 dwa_uncompress in libavcodec/exr
Security vulnerability affects the ffmpeg package. dwauncompress in libavcodec/exr...
CLEANSTART-2024-LU46307 dwa_uncompress in libavcodec/exr
Security vulnerability affects the ffmpeg4 package. dwauncompress in libavcodec/exr...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the dwauncompress function when decoding OpenEXR files with DWAA or DWAB compression. An attacker can cause arbitrary memory writes by crafting files with mismatched channel types and counts, leading to pointer...
ALPINE-CVE-2025-59733
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
libavcodec/exr.c Heap Buffer Overflow DoS
The vulnerability of the dwauncompress function in the libavcodec/exr.c component of the multimedia library FFmpeg is related to an incorrect check on the dccount field. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause...
ALPINE-CVE-2021-33815
dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...
CVE-2021-33815
dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...
CVE-2021-33815
dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...
CVE-2021-33815
dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...
FFmpeg input validation error vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg, which stems from dwauncompress in libavcodec/exr.c that does not strictly check dccount, and can be exploited by an attacker to cross-border array access...
