CVE-2024-22861

CVE-2024-22861 is an FFmpeg integer overflow vulnerability affecting FFmpeg before n6.1 in the avcodec/osq module, which can lead to denial of service. The issue is rooted in an overflow in the osq-related code path and is explicitly described as affecting FFmpeg versions prior to 6.1. Connected ...

CVE-2024-22862

CVE-2024-22862 is an integer overflow vulnerability in FFmpeg before version 6.1 that allows remote attackers to execute arbitrary code via the JJPEG XL Parser. The affected component is FFmpeg ( JJPEG XL Parser). Exploitation is described as remote and requires no user interaction. Impact is arb...

Malicious code in @shenmue_dsc/fluent-ffmpeg-multistream-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3d01a5cf41e8dc5e1f1997a92ef62717b51538e2d3a2c481a7127e22e291101 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

Code injection

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

PT-2024-13661 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: Jave2 version 3.3.1 Description: An issue was discovered in Jave2, allowing attackers to execute arbitrary code via the FFmpeg function. Recommendations: For Jave2 version 3.3.1, consider disabling the FFmpeg function until a patch is...

CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

Jave2 Security Vulnerability

JAVE is a Java wrapper for the ffmpeg project. A security vulnerability exists in Jave2 version 3.3.1 that could allow an attacker to execute arbitrary code via FFmpeg functions...

CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

CVE-2023-48909

The CVE-2023-48909 entry concerns Jave2 v3.3.1, where an issue in the FFmpeg function allows attackers to execute arbitrary code. Documents consistently identify the vulnerable component as the FFmpeg function within Jave2 and confirm a remote attack vector with NULL privileges and user interacti...

PT-2024-6072 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1 Description: The issue is related to a heap buffer overflow vulnerability in the draw block rectangle function of libavfilter/vf codecview.c. This allows attackers to cause undefined behavior or a Denial of Service DoS via...

PT-2023-9660 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg versions n5.1 to n6.1 Description: The issue is related to an Off-by-one Error vulnerability in the libavfilter/avf showspectrum.c component of the FFmpeg library. This vulnerability allows attackers to cause a Denial of Service DoS vi...

The vulnerability of the smc_encode_stream function in the libavcodec/smcenc.c component of the FFmpeg multimedia library allows a perpetrator to gain access to confidential data and also trigger a service denial.

The vulnerability of the smcencodestream function in the libavcodec/smcenc.c component of the FFmpeg multimedia library relates to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain access to confidential dat...

The vulnerability of the `av_timecode_make_string` function in the `libavutil/timecode.c` file of the FFmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability of the avtimecodemakestring function in the libavutil/timecode.c file of the FFmpeg multimedia library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created .mov file...

The vulnerability of the `build_open_gop_key_points` function in the `libavformat/mov.c` component of the multimedia library FFmpeg allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the buildopengopkeypoints function in the libavformat/mov.c component of the multimedia library FFmpeg is related to integer overflow. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the libavcodec/rpzaenc.c component in the FFmpeg multimedia library allows a perpetrator to gain access to confidential data and also trigger a service failure.

The vulnerability of the libavcodec/rpzaenc.c component in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, as well as cause service...

GLSA-202312-14 : FFmpeg: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202312-14 FFmpeg: Multiple Vulnerabilities - dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked. CVE-2021-33815 - adtsdecodeextradata in libavformat/adtsenc...

FFmpeg: Multiple Vulnerabilities

Background FFmpeg is a complete solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...

CVE-2023-49096

Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the /Videos//stream and /Videos//stream. endpoints which are present in the current Jellyfin version. Additional endpoints in the...