CVE-2017-15672

CVE-2017-15672 affects FFmpeg’s libavcodec/ffv1dec.c: a crafted MP4 file can trigger an out-of-bounds read, impacting FFmpeg 2.4/3.3.4 (and possibly earlier). Connected advisories confirm the vulnerability and document fixes in later FFmpeg releases (e.g., openSUSE openSUSE-2018-172 patching to 3...

CVE-2017-15672

The readheader function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read...

CVE-2017-15672

The readheader function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read...

Out-Of-Bounds Read

ffmpeg is vulnerable to out-of-bound reads. It happens because there is a discrepancy in the bufsize used to calculate “bytestreamend” and the “size” returned from the AVRB24 function. A malicious user can pass a mp4 file to the system to trigger an out of array read...

The vulnerability of the read_tfra() function in the FFmpeg multimedia library (libavformat/mov.c) allows a attacker to cause a service failure.

The vulnerability of the readtfra function in the FFmpeg multimedia library libavformat/mov.c arises from the lack of checking for the end-of-file flag during the processing of MOV files. This is related to the extensive loop iteration associated with a large value of the “itemcount” field in the...

Ffmpeg Double Release Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A double release vulnerability exists in FFmpeg 3.3.4 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted AVI file...

Double free

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

CVE-2017-15186

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

DEBIAN-CVE-2017-15186

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

CVE-2017-15186

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

CVE-2017-15186

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

ALPINE-CVE-2017-15186

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

CVE-2017-15186

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

CVE-2017-15186

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

CVE-2017-15186

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file...

CVE-2017-15186

CVE-2017-15186 is a double-free vulnerability in FFmpeg 3.3.4 and earlier that can be exploited remotely by processing a crafted AVI file to cause a denial of service. The connected sources confirm this flaw affects FFmpeg’s AVI handling and was fixed in subsequent releases (e.g., Debian’s FFmpeg...

Memory Leaks Through Double-free

FFmpeg is vulnerable to memory leaks. These occur through a double-free vulnerability cause when parsing an AVI file to a MKV file using the ffvhuff decoder...

FreeBSD : FFmpeg -- multiple vulnerabilities (ed73829d-af6d-11e7-a633-009c02a2ab30)

FFmpeg security reports : Multiple vulnerabilities have been fixed in FFmpeg 3.3.4. Please refer to the CVE list for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...

ffmpeg: Memcpy-param-overlap in xan_wc3_copy_pixel_run

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6393461273001984 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDXANWC3fuzzer Fuzz target binary: ffmpegAVCODECIDXANWC3fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

Debian DSA-3996-1 : ffmpeg - security update

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed Real, MV, RL2, ASF, Apple HLS, Phantom Cine, MXF, NSV, MOV or RTP H.264 files/streams are processed. %NASLMINLEVEL...