10849 matches found
CVE-2025-69693
Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder libavcodec/rv60dec.c. The quantization parameter qp validation at line 2267 only checks the lower bound qp 0 but is missing upper bound validation. The qp value can reach 65 base value 63 from 6-bit frame header + offset +2 from...
DEBIAN-CVE-2025-69693
Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder libavcodec/rv60dec.c. The quantization parameter qp validation at line 2267 only checks the lower bound qp 0 but is missing upper bound validation. The qp value can reach 65 base value 63 from 6-bit frame header + offset +2 from...
CVE-2025-69693
Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder libavcodec/rv60dec.c. The quantization parameter qp validation at line 2267 only checks the lower bound qp 0 but is missing upper bound validation. The qp value can reach 65 base value 63 from 6-bit frame header + offset +2 from...
UBUNTU-CVE-2025-69693
Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder libavcodec/rv60dec.c. The quantization parameter qp validation at line 2267 only checks the lower bound qp 0 but is missing upper bound validation. The qp value can reach 65 base value 63 from 6-bit frame header + offset +2 from...
CVE-2025-69693: Out-of-bounds Read
Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder libavcodec/rv60dec.c. The quantization parameter qp validation at line 2267 only checks the lower bound qp 0 but is missing upper bound validation. The qp value can reach 65 base value 63 from 6-bit frame header + offset +2 from...
CVE-2025-69693
Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder libavcodec/rv60dec.c. The quantization parameter qp validation at line 2267 only checks the lower bound qp 0 but is missing upper bound validation. The qp value can reach 65 base value 63 from 6-bit frame header + offset +2 from...
CVE-2025-69693
Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder libavcodec/rv60dec.c. The quantization parameter qp validation at line 2267 only checks the lower bound qp 0 but is missing upper bound validation. The qp value can reach 65 base value 63 from 6-bit frame header + offset +2 from...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the RV60 video decoder. An attacker can cause limited information disclosure and denial of service by convincing a user to process a specially crafted RV60 file. Workaround This vulnerability can be mitigated by...
CVE-2025-69693
Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder libavcodec/rv60dec.c. The quantization parameter qp validation at line 2267 only checks the lower bound qp 0 but is missing upper bound validation. The qp value can reach 65 base value 63 from 6-bit frame header + offset +2 from...
CVE-2025-69693
The FFmpeg multimedia library is vulnerable to an out-of-bounds read in the RV60 video decoder (libavcodec/rv60dec.c). The root cause is missing upper bound validation for the quantization parameter (qp) at line 2267; while only the lower bound (qp
The vulnerability of the FFmpeg multimedia library, related to pointer assignment errors, allows attackers to trigger a service failure.
The vulnerability of the FFmpeg multimedia library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a corrupted audio file...
ffmpeg:ffmpeg_dem_WSD_fuzzer: Use-of-uninitialized-value in wsd_read_header
Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6596163492184064 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemWSDfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...
The vulnerability of the yuv2ya16_X_c_template() function in the libswscale/output.c component of the multimedia library FFmpeg allows a attacker to cause a service failure.
The vulnerability of the yuv2ya16Xctemplate function in the libswscale/output.c component of the multimedia library FFmpeg is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ffmpeg:ffmpeg_BSF_EXTRACT_EXTRADATA_fuzzer: Heap-buffer-overflow in extract_extradata_filter
Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5705993148497920 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFEXTRACTEXTRADATAfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Typ...
The vulnerability of the FFmpeg multimedia library, related to improper control of resource identifiers, allows a hacker to trigger a service failure.
The vulnerability of the FFmpeg multimedia library is related to improper control of resource identifiers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the FFmpeg multimedia library, related to improper control of resource identifiers, allows attackers to gain access to confidential data.
The vulnerability of the FFmpeg multimedia library is related to improper control of resource identifiers. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
The vulnerability of the FFmpeg multimedia library, related to improper control of resource identifiers, allows attackers to gain access to confidential data.
The vulnerability of the FFmpeg multimedia library is related to improper control of resource identifiers. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
CVE-2026-3682
A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. This vulnerability affects the function Execute of the file /internal/service/ffmpeg/ffmpeg.go. The manipulation leads to argument injection. The attack may be initiated remotely. The exploit has been disclosed publicl...
ffmpeg:ffmpeg_AV_CODEC_ID_EXR_DEC_fuzzer: Use-of-uninitialized-value in piz_uncompress
Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6310933506097152 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDEXRDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...
Arbitrary Argument Injection
Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via the Execute function in the /internal/service/ffmpeg/ffmpeg.go file. An attacker can inject arbitrary arguments into the execution context by supplying crafted input, potentially leading to unauthorized...