Ffmpeg Denial of Service Vulnerability (CNVD-2018-13660)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/movenc.c file in FFmpeg versions prior to 4.0.2. The vulnerability can be exploited by an attacker to cause a denial of service applicatio...

Ffmpeg Denial of Service Vulnerability (CNVD-2018-13661)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/movenc.c file in FFmpeg versions prior to 4.0.2. An attacker can exploit this vulnerability to cause a denial of service application crash...

Debian DSA-4249-1 : ffmpeg - security update

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

[SECURITY] [DSA 4249-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4249-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 17, 2018 https://www.debian.org/security/faq -...

ffmpeg/ffmpeg_AV_CODEC_ID_MP3ADUFLOAT_fuzzer: Heap-use-after-free in av_packet_ref

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5137954375729152 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDMP3ADUFLOATfuzzer Fuzz target binary: ffmpegAVCODECIDMP3ADUFLOATfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-use-after-fre...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service DoS attacks. The library does not properly handle frame types that contain multiple independent substreams in them, allowing a malicious user to pass an AVI file to be converted to an MP4 file that can cause an out-of-array access that can crash the...

DSA-4249-1 ffmpeg - security update

Bulletin has no description...

Debian: Security Advisory (DSA-4249-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service DoS attacks. A malicious user can convert an AVI file to a MP4 file to cause a null pointer dereference through the ffmpeg4decodepictureheader method in mpeg4videodec.c, crashing the application...

ffmpeg/ffmpeg_AV_CODEC_ID_DVDSUB_fuzzer: Heap-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5746777750765568 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDDVDSUBfuzzer Fuzz target binary: ffmpegAVCODECIDDVDSUBfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

FFmpeg 'handle_eac3' function out-of-bounds read vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'handleeac3' function in the libavformat/movenc.c file in FFmpeg version 4.0.1, which originated from incorrect parameters AVCodecParameters being...

FFmpeg libavcodec/ac3_parser.c file null pointer dereference vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/ac3parser.c file in FFmpeg version 4.0.1, which stems from the program not detecting a failed 'initgetbits8' function call. The vulnerabili...

FFmpeg vc1_put_blocks_clamped function out-of-bounds access vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. An array out-of-bounds access vulnerability exists in the vc1putblocksclamped function in libavcodec/vc1block.c in FFmpeg 4.0.1 when converting a...

Ffmpeg 'ff_mpeg4_decode_picture_header' Null Pointer Dereference Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffmpeg4decodepictureheader' function in the libavcodec/mpeg4videodec.c file in FFmpeg version 4.0.1, which is caused by the program failing to check...

Ffmpeg Denial of Service Vulnerability (CNVD-2018-12758)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in libavcodec in FFmpeg version 4.0.1, which is caused by the program failing to properly maintain consistency between the context profile field and the...

Information disclosure

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1putblocksclamped function in libavcodec/vc1block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service...

Design/Logic Flaw

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...

CVE-2018-13302

In FFmpeg 4.0.1, improper handling of frame types other than EAC3FRAMETYPEINDEPENDENT that have multiple independent substreams in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or...

CVE-2018-13305

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1putblocksclamped function in libavcodec/vc1block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service...

CVE-2018-13302

In FFmpeg 4.0.1, improper handling of frame types other than EAC3FRAMETYPEINDEPENDENT that have multiple independent substreams in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or...