11106 matches found
FFmpeg dict.c Heap Buffer Overflow DoS
The vulnerability of the avdictset function in the dict.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause service failure...
ffmpeg:ffmpeg_AV_CODEC_ID_TRUEHD_fuzzer: Heap-buffer-overflow in ff_mlp_pack_output
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4644322217164800 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTRUEHDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...
Remote Code Execution
ffmpeg is vulnerable to remote code execution. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount leading to an integer overflow resulting in a small allocation with avcalloc, which allows an attacker to upload a...
ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in ljpeg_decode_rgb_scan
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6625593415827456 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x6250000021...
Exploit for SQL Injection in Zabbix
This is a comprehensive and well-structured vulnerability hub repository. Here's a concise analysis of the provided information: Classification: It is an offensive tool for various vulnerability exploitation and testing purposes. CVE IDs: The repository contains references to several CVE IDs,...
ffmpeg:ffmpeg_dem_MOV_fuzzer: Index-out-of-bounds in av_aes_init
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5968304170205184 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMOVfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in p8idct
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6576158459691008 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...
PT-2022-6631
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 5.1.2 Description The issue is related to the use of memory after it has been freed in the libavcodec/pthread frame.c component of the FFmpeg multimedia library when handling worker threads with the hwaccel decoder. Th...
Ubuntu: Security Advisory (USN-358-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-35004
JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10092-1 Rating: important References: 1202075 Cross-References: CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10086-1 Rating: important References: 1202075 Cross-References: CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612...
ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in ff_put_pixels_clamped_c
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4748914632294400 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...
ffmpeg:ffmpeg_dem_MOV_fuzzer: Index-out-of-bounds in av_aes_init
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5339113284304896 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMOVfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
OESA-2022-1808 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: trackheader in...
ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in ff_put_pixels_clamped_c
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6153490086363136 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...
USN-5472-1: FFmpeg vulnerabilities | Cloud Foundry
usn-5472-1 Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that FFmpeg would attempt to divide by zero when using Linear Predictive Coding LPC or AAC codecs. An attacker could possibly use this issue to cause a denial of service. This...
PT-2022-7203
Name of the Vulnerable Software and Affected Versions FFMPEG versions 5.1 and later Description A heap out-of-bounds memory write exists in the build open gop key points function due to an integer overflow. This occurs when the size calculation adds sc-ctts datai.count to sc-sample offsets count,...
ffmpeg-sdk vulnerable to OS Command Injection
A command injection vulnerability affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js...