ffmpeg -- multiple vulnerabilities

NVD reports: An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability. A null pointer dereference issue was discovered in 'FFmpeg' in decodemainheader...

Mageia: Security Advisory (MGASA-2022-0416)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0416 Updated ffmpeg packages fix security vulnerability

This update provides ffmpeg version 4.3.5, which fixes several security vulnerabilities and other bugs which were corrected upstream...

Updated ffmpeg packages fix security vulnerability

This update provides ffmpeg version 4.3.5, which fixes several security vulnerabilities and other bugs which were corrected upstream...

PT-2022-37582 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: ffmpeg versions prior to 4.3.5 Description: This issue concerns several security vulnerabilities and bugs in ffmpeg. The vulnerabilities were corrected upstream. Recommendations: For versions prior to 4.3.5, update to version 4.3.5 to resolve...

Debian: Security Advisory (DLA-3178-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3178-1] ffmpeg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3178-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler November 04, 2022 https://wiki.debian.org/LTS -...

DLA-3178-1 ffmpeg - security update

Bulletin has no description...

Debian: Security Advisory (DSA-5268-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5268-1 : ffmpeg - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5268 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The...

[SECURITY] [DSA 5268-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5268-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 01, 2022 https://www.debian.org/security/faq -...

DSA-5268-1 ffmpeg - security update

Bulletin has no description...

The vulnerability of the wtvfile_open_sector function in the wtvdec.c component of the FFmpeg multimedia library allows a attacker to cause a service failure.

The vulnerability of the wtvfileopensector function in the wtvdec.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause service interruptions...

FFmpeg Buffer Overflow Vulnerability (CNVD-2022-70582)

FFmpeg is software developed by individual developers that performs recording, converting, and streaming functions for a wide range of audio and video formats. A buffer overflow vulnerability exists in FFmpeg where the size calculation in buildopengopkeypoints iterates over all entries in the loo...

The vulnerability of the `avpriv_float_dsp_allocl` function in the `libavutil/float_dsp.c` component of the FFmpeg multimedia library allows a attacker to cause a service failure.

The vulnerability of the avprivfloatdspallocl function in the libavutil/floatdsp.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause service failure...

DEBIAN-CVE-2022-2566

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...

CVE-2022-2566

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...

Integer overflow

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...

CVE-2022-2566

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...

CVE-2022-2566 Heap-memory write in FFMPEG

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...