FFmpeg buffer overflow vulnerability (CNVD-2021-28376)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in libavcodec in FFmpeg 4.3 and earlier versions. An attacker could exploit this vulnerability via speciall...

Stack Overflow Vulnerability in FFmpeg

FFmpeg is a set of can be used to record, convert digital audio, video, and can be converted into a stream of open source computer programs. A stack overflow vulnerability exists in FFmpeg. An attacker could exploit this vulnerability to cause a denial of service...

FFmpeg Buffer Overflow Vulnerability (CNVD-2021-25376)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in the sniffchannelorder function in aacdectemplate.c in FFmpeg 3.1.2. An attacker can exploit this...

CVE-2020-35964

trackheader in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing...

FFmpeg 缓冲区错误漏洞

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. An out-of-bounds write vulnerability exists in trackheader in libavformat/vividas.c in FFmpeg 4.3.1. The vulnerability stems from a failure of...

CVE-2020-13904

FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parseplaylist in libavformat/hls.c frees a pointer, and later that pointer is accessed in avprobeinputformat3 in libavformat/format.c...

PT-2020-6487 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: ffmpeg versions prior to 4.3 Description: The issue is related to the tty demuxer in the FFmpeg library, which did not have a read probe function assigned to it. This can be exploited by crafting a legitimate "ffconcat" file that references a...

DEBIAN-CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

PT-2021-6711 · FFmpeg +3 · Ffmpeg +3

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to a Buffer Overflow in the config input function within the libavfilter/vf gblur.c component of the Ffmpeg library. This allows attackers to potentially cause a Denial of Service or...

CVE-2019-17542

FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...

The vulnerability of the FFmpeg multimedia library, related to the assignment of the null pointer, allows a hacker to trigger a service failure.

The vulnerability of the FFmpeg multimedia library relates to the use of a zero pointer when detecting duplicate frames in a single frame incorrectly. Exploiting this vulnerability could allow an attacker to cause a service failure by using specially crafted HEVC data...

PT-2021-4514 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: Ffmpeg affected versions not specified Description: The issue is related to a heap-based Buffer Overflow vulnerability in the gaussian blur component of the Ffmpeg library. This vulnerability can be exploited by a remote attacker to gain acce...

PT-2021-5793

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A heap-based Buffer Overflow issue exists in FFmpeg, specifically at libavfilter/vf floodfill.c, which may lead to memory corruption and other potential consequences. This issue is related to a buffer overflow...

The vulnerability of the FFmpeg multimedia library, related to overflow in dynamic memory buffers, allows attackers to cause a service failure or execute arbitrary code.

The vulnerability of the FFmpeg multimedia library is related to overflow of the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code using a specially crafted file or stream...

FFmpeg Uninitialized Variable Usage Vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. An uninitialized variable usage vulnerability exists in versions of FFmpeg prior to 3.2.14. The vulnerability stems from aareadheader not checking...

FFmpeg Out-of-Bounds Access Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. FFmpeg commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 An out-of-bounds access vulnerability exists in multiple arrays of the mms protocol in previous versions. An attacker can exploit this...

DEBIAN-CVE-2018-1999010

FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been...

FFmpeg 'handle_eac3' function out-of-bounds read vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'handleeac3' function in the libavformat/movenc.c file in FFmpeg version 4.0.1, which originated from incorrect parameters AVCodecParameters being...

FFmpeg vc1_put_blocks_clamped function out-of-bounds access vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. An array out-of-bounds access vulnerability exists in the vc1putblocksclamped function in libavcodec/vc1block.c in FFmpeg 4.0.1 when converting a...