7750 matches found
CVE-2016-6920
FFmpeg (libavcodec/exr.c, decode_block) is affected by CVE-2016-6920: a heap-based buffer overflow that can be triggered by crafted tile positions, leading to a denial of service (remote, no authentication required). Affected versions are FFmpeg before 3.1.3. Mitigation/remediation: upgrade to FF...
CVE-2016-6164
CVE-2016-6164: Integer overflow in FFmpeg’s mov_build_index (libavformat/mov.c) allows remote impact via sample-size vectors. Affected builds include FFmpeg before 2.8.8, 3.0.x before 3.0.3, and 3.1.x before 3.1.1. Impact is described as unspecified in the sources. Remediation: upgrade FFmpeg to ...
CVE-2016-6164
Integer overflow in the movbuildindex function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size...
ffmpeg: Stack-buffer-overflow in decode_zbuf
Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4529672557690880 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDPNGfuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDPNGfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Cras...
Design/Logic Flaw
An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file...
CVE-2016-5199
An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file...
CVE-2016-5199
An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file...
CVE-2016-5199
An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file...
CVE-2016-5199
An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file...
CVE-2016-5199
CVE-2016-5199 is a heap corruption issue in the FFmpeg MP4 decoder used by Chromium/Chrome. The off-by-one error can lead to a 0-size allocation and heap-pointer corruption via a crafted video file, potentially allowing remote code execution. Affected software includes Chrome as shipped on Mac, W...
CVE-2016-7122
The avireadnikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure...
CVE-2016-7555
The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...
CVE-2016-7555
The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...
UBUNTU-CVE-2016-7450
The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...
CVE-2016-7502
The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...
ALPINE-CVE-2016-6881
The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...
CVE-2016-6881
The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...
DEBIAN-CVE-2016-8595
The gsmparse function in libavcodec/gsmparser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...