CVE-2015-8363

The jpeg2000readmainheaders function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service out-of-bounds heap-memory access or...

Design/Logic Flaw

The jpeg2000readmainheaders function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service out-of-bounds heap-memory access or...

UBUNTU-CVE-2015-8363

The jpeg2000readmainheaders function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service out-of-bounds heap-memory access or...

CVE-2015-8363

The jpeg2000readmainheaders function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service out-of-bounds heap-memory access or...

CVE-2015-8365

CVE-2015-8365 affects FFmpeg libavcodec/smacker.c. The vulnerability arises when the data size is not checked against the number of channels, allowing an out-of-bounds access that can cause a remote denial of service (and possible other impact) via crafted Smacker data. Affected FFmpeg versions: ...

CVE-2015-8364

Integer overflow in the ffiviinitplanes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service out-of-bounds heap-memory access or possibly have unspecified other impact via crafted image dimensions in...

CVE-2015-8365

The smkadecodeframe function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is consistent with the number of channels, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly...

CVE-2015-8364

CVE-2015-8364 is a vulnerability in FFmpeg’s libavcodec/ivi.c (ff_ivi_init_planes) where an integer overflow can occur due to crafted Indeo Video Interactive dimensions. Affected FFmpeg branches include 2.6 before 2.6.5, 2.7.x before 2.7.3, and 2.8.x before 2.8.2. The issue enables remote attacke...

CVE-2015-8363

CVE-2015-8363 affects FFmpeg libavcodec/jpeg2000dec.c: jpeg2000_read_main_headers did not enforce SIZ marker uniqueness, enabling possible denial of service via crafted JPEG 2000 images with two or more SIZ markers. Other listed advisories (CVE-2015-8364, CVE-2015-8365, etc.) show additional FFmp...

CVE-2015-8363

The jpeg2000readmainheaders function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service out-of-bounds heap-memory access or...

CVE-2015-8364

Integer overflow in the ffiviinitplanes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service out-of-bounds heap-memory access or possibly have unspecified other impact via crafted image dimensions in...

UBUNTU-CVE-2015-8364

Integer overflow in the ffiviinitplanes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a denial of service out-of-bounds heap-memory access or possibly have unspecified other impact via crafted image dimensions in...

CVE-2015-8365

The smkadecodeframe function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is consistent with the number of channels, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly...

UBUNTU-CVE-2015-8365

The smkadecodeframe function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is consistent with the number of channels, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly...

FFmpeg ljpeg_decode_yuv_scan 函数拒绝服务漏洞

No description provided by source...

FFmpeg ff_hevc_parse_sps 函数拒绝服务漏洞

No description provided by source...

FFmpeg init_tile 函数拒绝服务漏洞

No description provided by source...

FFmpeg decode_uncompressed 函数拒绝服务漏洞

No description provided by source...

FFmpeg 'ljpeg_decode_yuv_scan' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ljpegdecodeyuvscan' function in the libavcodec/mjpegdec.c file in versions of FFmpeg prior to 2.8.2. As the program fails to perform length and width...

FFmpeg 'init_tile' Function Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'inittile' function in the libavcodec/jpeg2000dec.c file in versions of FFmpeg prior to 2.8.2. Due to the program failing to enforce maximum and minim...