CVE-2022-3341

A null pointer dereference issue was discovered in 'FFmpeg' in decodemainheader function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformatnewstream and triggers the null pointer dereference error, causing an application to crash...

CVE-2022-3341

A null pointer dereference issue was discovered in 'FFmpeg' in decodemainheader function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformatnewstream and triggers the null pointer dereference error, causing an application to crash...

CVE-2022-3341

A null pointer dereference issue was discovered in 'FFmpeg' in decodemainheader function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformatnewstream and triggers the null pointer dereference error, causing an application to crash...

ffmpeg:ffmpeg_AV_CODEC_ID_TAK_fuzzer: Heap-buffer-overflow in ff_tak_check_crc

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6144059523858432 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTAKfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6070000005b2...

ffmpeg:ffmpeg_AV_CODEC_ID_SVQ3_fuzzer: Heap-buffer-overflow in ff_emulated_edge_mc_8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5352418248622080 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSVQ3fuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_VC1_fuzzer: Heap-buffer-overflow in put_no_rnd_vc1_chroma_mc8_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5840588224462848 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVC1fuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

ffmpeg:ffmpeg_AV_CODEC_ID_SCPR_fuzzer: Heap-buffer-overflow in decode_run_p

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5302669294305280 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSCPRfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

SUSE SLES15: libavcodec-devel / libavcodec57 / libavcodec57-32bit / etc (SUSE-SU-2023:0005-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0005-1 advisory. - CVE-2022-3109: Fixed null pointer dereference in vp3decodeframe bsc1206442. - CVE-2020-22042: Fixed a denial of service...

SUSE SLED15: ffmpeg-4 / ffmpeg-4-libavcodec-devel / ffmpeg-4-libavdevice-devel / etc (SUSE-SU-2023:0008-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0008-1 advisory. - CVE-2022-3109: Fixed null pointer dereference in vp3decodeframe bsc1206442. Tenable has extracted the...

SUSE SLED15: ffmpeg / ffmpeg-private-devel / libavcodec-devel / libavcodec57 / etc (SUSE-SU-2023:0007-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0007-1 advisory. - CVE-2022-3109: Fixed null pointer dereference in vp3decodeframe bsc1206442. Tenable has extracted the...

SUSE: Security Advisory (SUSE-SU-2023:0007-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0005-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0008-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:0008-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2022-3109: Fixed null pointer dereference in vp3decodeframe bsc1206442...

SUSE-SU-2023:0007-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2022-3109: Fixed null pointer dereference in vp3decodeframe bsc1206442...

SUSE-SU-2023:0005-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2022-3109: Fixed null pointer dereference in vp3decodeframe bsc1206442. - CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the linkfilterinouts function in libavfilter/graphparser.c. bsc1186761 - CVE-2021-3809...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service DoS attacks. Lack of checks for the return value of avmalloc in vp3decodeframe in libavcodec/vp3.c causes a null pointer dereference, resulting a denial of service conditions...

FFmpeg Code Problem Vulnerability (CNVD-2024-31520)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. FFmpeg has a code issue vulnerability that stems from the vp3decodeframe function in its libavcodec/vp3.c file that does not reasonably check the return result of the avmalloc function, whi...

Getting the correct HTML codecs parameter for an AV1 video

This post is mostly for my own reference, but I couldn't find a good guide elsewhere, so here we go! I wanted to embed a screencast in a web page, and I wanted it to be as efficient as possible. To achieve this, I created two version of the video, and embedded it like this: The MP4 version uses t...

Getting the correct HTML codecs parameter for an AV1 video

This post is mostly for my own reference, but I couldn't find a good guide elsewhere, so here we go! I wanted to embed a screencast in a web page, and I wanted it to be as efficient as possible. To achieve this, I created two version of the video, and embedded it like this: The MP4 version uses t...