The vulnerability of the mov_build_index function in the FFmpeg multimedia library allows a hacker to cause unpredictable effects.

The vulnerability of the movbuildindex function in the FFmpeg multimedia library is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to exert unpredictable effects using vectors related to the sample size...

ffmpeg: Crash in ff_sbr_hf_apply_noise_3_sse2

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4649584649306112 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAACfuzzer Fuzz target binary: ffmpegAVCODECIDAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash...

OPENSUSE-SU-2017:1765-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: ffmpeg was updated to 2.8.12, fixing a lot of security issues. boo1046211...

ffmpeg: Heap-buffer-overflow in ipvideo_format_10_firstpass

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4755798049685504 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDINTERPLAYVIDEOfuzzer Fuzz target binary: ffmpegAVCODECIDINTERPLAYVIDEOfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

The vulnerability in the `libavformat/rtmppkt.c` component of the FFmpeg multimedia library allows a attacker to execute arbitrary code.

The vulnerability of the libavformat/rtmppkt.c component in the FFmpeg multimedia library arises due to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, without any checks for packet size compliance with RTMP...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to execute arbitrary code

The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, without any data size checking being performed...

The vulnerability of the FFmpeg multimedia library’s component allows a hacker to execute arbitrary code.

The vulnerability of the FFmpeg multimedia library’s component is caused by an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using data with incorrect size in the HTTP response...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit

The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the decodeframe function in libavcodec/pictordec.c...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit

The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the decodeframecommon function in libavcodec/pngdec.c...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit

The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the function ffh264SliceContextInit in libavcodec/h264dec.c...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit

The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the function ipvideodecodeblockopcode0xA in...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious user can pass a CHUNKY file to the system to cause a heap-based overflow, crashing the system...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. The library does not ensure that the pixfmt parameter is set, allowing a malicious user to cause the application to crash by passing a file to the system...

Information Disclosure

FFmpeg is vulnerable to information disclosure. The library does not properly handle HTTP Live Streaming filename extensions and demuxer names. A malicious user can pass playlist files to the system to obtain sensitive information...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. The library contains an off-by-one bug that allows a malicious user can pass a malicious dfa file to the system to cause a buffer overflow, crashing the system and potentially having other impacts...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks and possibly other attacks. A malicious can pass a xwd image file to the system to cause a buffer overflow, crashing the system...

CVE-2017-9993

FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensions and demuxer names, which allows attackers to read arbitrary files via crafted playlist data...

CVE-2017-9990

Stack-based buffer overflow in the colorstringtorgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

Heap overflow

libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pixfmt is set, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecifie...

CVE-2017-9990

Stack-based buffer overflow in the colorstringtorgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...