CVE-2023-47470: Out-of-bounds Write

Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...

PT-2023-30463

Name of the Vulnerable Software and Affected Versions Ffmpeg versions before github commit 4565747056a11356210ed8edcecb920105e40b60 Description The issue allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the ref pic list struc...

CVE-2023-47470

Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...

CVE-2023-47470

Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...

CVE-2023-47470

Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...

Ubuntu: Security Advisory (USN-6449-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-47470

Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...

USN-6449-2 ffmpeg regression

USN-6449-1 fixed vulnerabilities in FFmpeg. Unfortunately that update could introduce a regression in tools using an FFmpeg library, like VLC. This updated fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that FFmpeg incorrectly managed memory...

USN-6449-2: FFmpeg regression

USN-6449-1 fixed vulnerabilities in FFmpeg. Unfortunately that update could introduce a regression in tools using an FFmpeg library, like VLC. This updated fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that FFmpeg incorrectly managed memory...

Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM : FFmpeg regression (USN-6449-2)

The remote Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6449-2 advisory. USN-6449-1 fixed vulnerabilities in FFmpeg. Unfortunately that update could introduce a regression in tools using an FFmpeg library, like...

FFmpeg FFTools Component DoS

The vulnerability in the fftools/cmdutils.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows an attacker to cause service failures remotely...

FFmpeg libavcodec/aacpsy.c DoS

The vulnerability of the libavcodec/aacpsy.c component in the FFmpeg multimedia library is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure...

Debian DSA-5552-1 : ffmpeg - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5552 advisory. Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if...

Debian: Security Advisory (DSA-5552-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5552-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5552-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 12, 2023 https://www.debian.org/security/faq -...

DSA-5552-1 ffmpeg - security update

Bulletin has no description...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in ff_jpegxl_parse_codestream_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6151006496620544 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

PT-2023-7934 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: The issue is related to a buffer overflow in the FFmpeg multimedia library, which can be exploited to impact the confidentiality, integrity, and availability of protected information...

PT-2023-8229

Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description The issue in the FFmpeg multimedia library is related to insufficient access control. It may allow a remote attacker to elevate their privileges. Recommendations At the moment, there is no...

ffmpeg:ffmpeg_AV_CODEC_ID_FOURXM_fuzzer: Crash in av_fast_realloc

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5854263397711872 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDFOURXMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x010000000084...