UBUNTU-CVE-2020-12284

cbsjpegsplitfragment in libavcodec/cbsjpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEGMARKERSOS handling because of a missing length check...

CVE-2020-12284

cbsjpegsplitfragment in libavcodec/cbsjpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEGMARKERSOS handling because of a missing length check...

CVE-2020-12284

FFmpeg contains a heap-based buffer overflow in libavcodec/cbs_jpeg.c (cbs_jpeg_split_fragment) in versions 4.1 and 4.2.2, triggered during JPEG_MARKER_SOS processing due to a missing length check. This could lead to memory corruption. Several advisories reference CVE-2020-12284; fixes were issue...

CVE-2020-12284

cbsjpegsplitfragment in libavcodec/cbsjpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEGMARKERSOS handling because of a missing length check...

CVE-2020-12284

cbsjpegsplitfragment in libavcodec/cbsjpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEGMARKERSOS handling because of a missing length check...

ffmpeg:ffmpeg_AV_CODEC_ID_ADPCM_IMA_CUNNING_fuzzer: Global-buffer-overflow in adpcm_ima_cunning_expand_nibble

Detailed Report: https://oss-fuzz.com/testcase?key=5717917221257216 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDADPCMIMACUNNINGfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000a39768 Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_MV30_fuzzer: Heap-buffer-overflow in idct_add

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5673678898724864 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMV30fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HCA_fuzzer: Heap-buffer-overflow in reconstruct_hfr

Detailed Report: https://oss-fuzz.com/testcase?key=5752477891952640 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDHCAfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62d0000003fc Crash State: reconstructhfr...

The vulnerability of the handle_open_brace function in the FFmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability of the handleopenbrace function in the FFmpeg multimedia library relates to the reading of data beyond the buffer’s boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using specially created Matroska video format data...

ffmpeg:ffmpeg_BSF_TRACE_HEADERS_fuzzer: Index-out-of-bounds in cbs_jpeg_read_huffman_table

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6291612167831552 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFTRACEHEADERSfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

GLSA-202003-65 : FFmpeg: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-65 FFmpeg: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user or automated system...

ffmpeg:ffmpeg_BSF_TRACE_HEADERS_fuzzer: Index-out-of-bounds in cbs_jpeg_read_dht

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5766121576988672 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFTRACEHEADERSfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

FFmpeg: Multiple vulnerabilities

Background FFmpeg is a complete, cross-platform solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user or automated...

ffmpeg:ffmpeg_BSF_TRACE_HEADERS_fuzzer: Heap-buffer-overflow in cbs_jpeg_split_fragment

Detailed Report: https://oss-fuzz.com/testcase?key=5129591506337792 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegBSFTRACEHEADERSfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b000000158 Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_G2M_fuzzer: Index-out-of-bounds in epic_decode_run_length

Detailed Report: https://oss-fuzz.com/testcase?key=5199357982015488 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDG2Mfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: epicdecoderunlength epicdecodetile...

ffmpeg:ffmpeg_AV_CODEC_ID_HCA_fuzzer: Global-buffer-overflow in unpack

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5683183715876864 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHCAfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_WAVPACK_fuzzer: Heap-buffer-overflow in ff_dsd2pcm_translate

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5693323504517120 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDWAVPACKfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_WAVPACK_fuzzer: Heap-buffer-overflow in wv_unpack_stereo

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5125168956702720 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWAVPACKfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_APNG_fuzzer: Heap-buffer-overflow in inflate

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5135981419429888 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAPNGfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6140000d2fd9...

ffmpeg:ffmpeg_AV_CODEC_ID_H264_fuzzer: Heap-buffer-overflow in get_se_golomb

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5746381832847360 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDH264fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x61100000ea8...