7835 matches found
CVE-2022-2566 Heap-memory write in FFMPEG
A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...
CVE-2022-2566 Heap-memory write in FFMPEG
A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...
CVE-2022-2566
FFmpeg vulnerability CVE-2022-2566: A heap out-of-bounds memory write introduced since version 5.1 in the function build_open_gop_key_points(), where adding sc->ctts_data[i].count to sc->sample_offsets_count may overflow, leading to a too-small allocation (av_calloc()) and potential remote ...
CVE-2022-2566
A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...
CVE-2022-2566 Heap-memory write in FFMPEG
A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...
FFmpeg 输入验证错误漏洞
FFmpeg is software developed by individual developers that performs recording, converting, and streaming functions for a wide range of audio and video formats. A buffer overflow vulnerability exists in FFmpeg where the size calculation in buildopengopkeypoints iterates over all entries in the loo...
The vulnerability of the libavcodec/aaccoder component in the FFmpeg multimedia library, which allows a hacker to cause a service failure
The vulnerability of the libavcodec/aaccoder component in the FFmpeg multimedia library is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure...
The vulnerability of the `avcodec_alloc_context3` function in the `options.c` file of the FFmpeg multimedia library allows a attacker to cause a service failure.
The vulnerability of the avcodecalloccontext3 function in the options.c file of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the `av_buffersrc_add_frame_flags` function in the `buffersrc` component of the FFmpeg multimedia library allows a attacker to cause a service failure.
The vulnerability of the avbuffersrcaddframeflags function in the buffersrc component of the FFmpeg multimedia library is related to improper memory release before deleting the last pointer. Exploiting this vulnerability allows an attacker to cause service failure remotely...
The vulnerability of the `ff_frame_pool_get` function in the `framepool.c` component of the FFmpeg multimedia library allows a attacker to cause a service failure.
The vulnerability of the ffframepoolget function in the framepool.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause service interruptions...
The vulnerability of the `url_open_dyn_buf_internal` function in the `libavformat/aviobuf.c` file of the multimedia library FFmpeg allows a attacker to cause a service failure.
The vulnerability of the urlopendynbufinternal function in the libavformat/aviobuf.c file of the FFmpeg multimedia library is related to improper memory release before deleting last references. Exploiting this vulnerability allows an attacker to cause service failures remotely...
The vulnerability of the av_dict_set function in the dict.c component of the FFmpeg multimedia library allows a attacker to cause a service failure.
The vulnerability of the avdictset function in the dict.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause service failure...
Remote Code Execution
ffmpeg is vulnerable to remote code execution. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount leading to an integer overflow resulting in a small allocation with avcalloc, which allows an attacker to upload a...
Exploit for SQL Injection in Zabbix
This is a comprehensive and well-structured vulnerability hub repository. Here's a concise analysis of the provided information: Classification: It is an offensive tool for various vulnerability exploitation and testing purposes. CVE IDs: The repository contains references to several CVE IDs,...
Ubuntu: Security Advisory (USN-358-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10092-1 Rating: important References: 1202075 Cross-References: CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10086-1 Rating: important References: 1202075 Cross-References: CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612...
OESA-2022-1808 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: trackheader in...
USN-5472-1: FFmpeg vulnerabilities | Cloud Foundry
usn-5472-1 Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that FFmpeg would attempt to divide by zero when using Linear Predictive Coding LPC or AAC codecs. An attacker could possibly use this issue to cause a denial of service. This...