CVE-2020-13904

CVE-2020-13904 affects FFmpeg up to 4.2.3 (and 2.8) due to a use-after-free in M3U8 processing: parse_playlist in libavformat/hls.c frees a pointer, which is later accessed in av_probe_input_format3 (libavformat/format.c). This can enable remote code execution via crafted media content, with seve...

CVE-2020-13904

FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parseplaylist in libavformat/hls.c frees a pointer, and later that pointer is accessed in avprobeinputformat3 in libavformat/format.c...

ffmpeg:ffmpeg_BSF_TRACE_HEADERS_fuzzer: Heap-buffer-overflow in cbs_jpeg_split_fragment

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4898624558596096 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegBSFTRACEHEADERSfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

ffmpeg:ffmpeg_BSF_HEVC_METADATA_fuzzer: Crash in cbs_h265_write_st_ref_pic_set

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5074645169733632 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegBSFHEVCMETADATAfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6318000058ec...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service DoS. The vulnerability exists as the svgprobe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service Infinite Loop via a crafted XML file...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service DoS. The vulnerability exists as an improper argument AVCodecParameters passed to the avprivrequestsample function in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service DoS. The vulnerability exists as an improper integer type in the mpeg4encodegopheader function in libavcodec/mpeg4videoenc.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

Arbitrary Code Execution

ffmpeg is vulnerable to arbitrary code execution. The vulnerability exists as the studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The flvwritepacket function in libavformat/flvenc.c does not check for an empty audio packet, leading to an assertion failure...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service DoS. The vulnerability exists as libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service. An attacker is able to hog the CPU via a malicious video file in Matroska format as the handleopenbrace function in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. An attacker is able to cause excessive CPU consumption via a malicious video file in Matroska format as the ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The decodeinit function in libavcodec/utvideodec.c allows remote attackers to cause a denial of service Out of array read via an AVI file with malicious dimensions within chroma subsampling data...

ffmpeg:ffmpeg_AV_CODEC_ID_HYMT_fuzzer: Heap-buffer-overflow in add_left_pred_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5135996772679680 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDHYMTfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

ffmpeg:ffmpeg_BSF_TRACE_HEADERS_fuzzer: Heap-buffer-overflow in cbs_jpeg_split_fragment

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5074667458265088 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFTRACEHEADERSfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x616000078bc...

ffmpeg:ffmpeg_AV_CODEC_ID_WAVPACK_fuzzer: Heap-buffer-overflow in wavpack_decode_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5678686190960640 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWAVPACKfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in av_parse_ratio

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5121369624018944 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

Security fix for the ALT Linux 9 package ffmpeg version 2:4.2.3-alt1

2:4.2.3-alt1 built May 28, 2020 Anton Farygin in task 252247 --- May 25, 2020 Anton Farygin - 4.2.3 Fixes: CVE-2019-13312,CVE-2020-12284...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Index-out-of-bounds in thp_read_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5100297658826752 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_fuzzer: Heap-use-after-free in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5671488765296640 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDJPEG2000fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address...