FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video. A heap buffer overflow vulnerability exists in crossfadesamplesfltp in libavfilter/afafade.c in FFmpeg version 4.2. An attacker can exploit this vulnerability to cause memory corruption...

FFmpeg buffer overflow vulnerability (CNVD-2021-39533)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in the convolutiony10bit function in libavfilter/vfvmafmotion.c in FFmpeg version 4.2. An attacker can...

FFmpeg Buffer Overflow Vulnerability (CNVD-2021-38297)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in dnnexecutelayerpad in libavfilter/dnn/dnnbackendnativelayerpad.c in FFmpeg version 4.2.3. The...

FFmpeg Buffer Overflow Vulnerability (CNVD-2021-39535)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in the lagfunframe16 function in libavfilter/vflagfun.c in FFmpeg version 4.2. An attacker can exploit this...

FFmpeg Denial of Service Vulnerability (CNVD-2021-38299)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg Ffmpeg team. A denial of service vulnerability exists in FFmpeg version 4.2, which stems from a resource management error in fftools/cmdutils.c, and can be exploited by an attacker to cause a...

FFmpeg Buffer Overflow Vulnerability (CNVD-2021-39534)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in the filteredges function in libavfilter/vfyadif.c in FFmpeg version 4.2. An attacker could exploit this...

FFmpeg buffer overflow vulnerability (CNVD-2021-39537)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in filtervertically8 in libavfilter/vfavgblur.c in FFmpeg version 4.2. An attacker can exploit this...

FFmpeg Divide by Zero Error Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg Ffmpeg team. A divide-by-zero error vulnerability exists in libavcodec/ratecontrol.c in FFmpeg version 4.1.3. An attacker could exploit this vulnerability to cause a denial of service...

DEBIAN-CVE-2020-22019

Buffer Overflow vulnerability in FFmpeg 4.2 at convolutiony10bit in libavfilter/vfvmafmotion.c, which could let a remote malicious user cause a Denial of Service...

CVE-2020-22015

Buffer Overflow vulnerability in FFmpeg 4.2 in movwritevideotag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code...

FFmpeg buffer overflow vulnerability (CNVD-2021-37145)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in FFmpeg version 4.1. A remote attacker can exploit this vulnerability to cause a denial of service via...

Exploit for SQL Injection in Zabbix

This repository is an open-source collection of pre-built vulnerable docker environments, known as Vulhub. It is a collection of vulnerable environments, not a single exploit or tool. The repository contains various vulnerable environments, including CouchDB, ffmpeg, git, and influxdb, among...

FFmpeg buffer overflow vulnerability (CNVD-2021-28376)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in libavcodec in FFmpeg 4.3 and earlier versions. An attacker could exploit this vulnerability via speciall...

Stack Overflow Vulnerability in FFmpeg

FFmpeg is a set of can be used to record, convert digital audio, video, and can be converted into a stream of open source computer programs. A stack overflow vulnerability exists in FFmpeg. An attacker could exploit this vulnerability to cause a denial of service...

FFmpeg Buffer Overflow Vulnerability (CNVD-2021-25376)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in the sniffchannelorder function in aacdectemplate.c in FFmpeg 3.1.2. An attacker can exploit this...

CVE-2020-35964

trackheader in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing...

FFmpeg 缓冲区错误漏洞

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. An out-of-bounds write vulnerability exists in trackheader in libavformat/vividas.c in FFmpeg 4.3.1. The vulnerability stems from a failure of...

CVE-2020-13904

FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parseplaylist in libavformat/hls.c frees a pointer, and later that pointer is accessed in avprobeinputformat3 in libavformat/format.c...

PT-2020-6487 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: ffmpeg versions prior to 4.3 Description: The issue is related to the tty demuxer in the FFmpeg library, which did not have a read probe function assigned to it. This can be exploited by crafting a legitimate "ffconcat" file that references a...

DEBIAN-CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...