CVE-2018-1999010

CVE-2018-1999010 affects FFmpeg prior to commit cced03dd667a5df6df8fd40d8de0bff477ee02e8, which contains multiple out-of-array access vulnerabilities in the MMS protocol. The flaws can allow an attacker to read out-of-bounds data and appear exploitable via network connectivity. The issue is expli...

ffmpeg/ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Heap-buffer-overflow in peak_table

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5283250636324864 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDCFHDfuzzer Fuzz target binary: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass an audio file to be converted to the MOV format, causing a divide-by-zero error, crashing the application...

Design/Logic Flaw

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

Format string

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

UBUNTU-CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

CVE-2018-14395

CVE-2018-14395 affects FFmpeg 3.2 and 4.0.2, where in libavformat/movenc.c a crafted audio file can trigger a divide-by-zero, causing a denial of service (application crash) when converting to MOV audio. Connected advisories confirm fixes in FFmpeg updates (e.g., SUSE SUSE-SU-2019:1299-1/2 and De...

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...

CVE-2018-14394

CVE-2018-14394 affects FFmpeg prior to 4.0.2 through the libavformat/movenc.c implementation, where a divide-by-zero in the movenc code path can crash the application when processing a crafted Waveform audio file. This is a DoS vulnerability with potential for an application crash (availability i...

CVE-2018-14395

libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted audio file when converting to the MOV audio format...

CVE-2018-14394

libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service application crash caused by a divide-by-zero error with a user crafted Waveform audio file...