Design/Logic Flaw

The readheader function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing invalid addresses."...

Heap overflow

The kempfdecodetile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote attackers to cause a denial of service out-of-bounds heap write via a G2M4 encoded file...

CVE-2013-0875

The ffaddpngpaethprediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an out-of-bounds array access...

Design/Logic Flaw

The oldcodec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted LucasArts Smush data that has a large size when decoded, related to an out-of-bounds array access...

Design/Logic Flaw

The ffaddpngpaethprediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an out-of-bounds array access...

Null pointer dereference

The avreallocparray function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified impact and remote vectors related to a "wrong return code" and a resultant NULL pointer dereference...

CVE-2013-4263

libavfilter in FFmpeg before 2.0.1 has unspecified impact and remote vectors related to a crafted "plane," which triggers an out-of-bounds heap write...

Out-of-bounds

The swrinit function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or unsupported 1 input or 2 output channel layout, related to an out-of-bounds array access...

CVE-2013-0872

The swrinit function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or unsupported 1 input or 2 output channel layout, related to an out-of-bounds array access...

CVE-2013-4264

The kempfdecodetile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote attackers to cause a denial of service out-of-bounds heap write via a G2M4 encoded file...

CVE-2013-0877

The CVE-2013-0877 entry describes a vulnerability in FFmpeg prior to 1.1.3 where the old_codec37 function in libavcodec/sanm.c can be triggered by crafted LucasArts Smush data of large size, leading to an out-of-bounds array access and unspecified impact. Public-availability documents (Gentoo GLS...

CVE-2013-4263

FFmpeg's libavfilter contains a vulnerability (CVE-2013-4263) present in versions before 2.0.1 where a crafted plane triggers an out-of-bounds heap write via a remote vector. The issue is confirmed by NVD and echoed in Gentoo GLSA 201603-06, which advises upgrading FFmpeg to a newer release (e.g....

CVE-2013-0872

CVE-2013-0872 affects FFmpeg before 1.1.3 via the swr_init function in libswresample/swresample.c, allowing remote attackers to impact confidentiality, integrity, and availability by supplying an invalid/unsupported channel layout (out-of-bounds access). The vulnerability is documented across mul...

CVE-2013-4265

Official data describes a vulnerability in FFmpeg: av_reallocp_array in libavutil/mem.c can cause a NULL pointer dereference due to an incorrect return code handling, with remote attack vectors cited in historical notes. Affected product is FFmpeg prior to 2.0.1; remediation is to upgrade to FFmp...

CVE-2013-0874

FFmpeg contains a vulnerability (CVE-2013-0874) in libavcodec/tiff.c: the doubles2str and shorts2str helpers can be triggered by a crafted TIFF image, due to an out-of-bounds array access. Affected: FFmpeg versions before 1.1.3. Impact as described: remote attacker could cause unspecified effects...

CVE-2013-0873

FFmpeg has a vulnerability CVE-2013-0873 in the read_header path (libavcodec/shorten.c) where an invalid channel count can cause freeing of invalid addresses. Affected are FFmpeg versions before 1.1.3. Impact is described as unspecified but high risk; limited details on exploit are provided. Reme...

CVE-2013-0878

CVE-2013-0878 affects FFmpeg’s libavcodec/targa.c, where the advance_line function is vulnerable to crafted Targa image data leading to an out-of-bounds array access. Impact is described as unspecified in the sources, with a high risk context (NVD CVSSv2 base score 9.3, network attack vector, no ...

CVE-2013-0876

CVE-2013-0876 : FFmpeg is affected by multiple integer overflows in libavcodec/sanm.c (functions old_codec37 and old_codec47) that can be exploited by crafted LucasArts Smush data to trigger an out-of-bounds access. The issue affects FFmpeg releases before 1.1.3 and enables remote impact as descr...

CVE-2013-4264

CVE-2013-4264 affects FFmpeg prior to 2.0.1. The kempf_decode_tile function in libavcodec/g2meet.c mishandles G2M4-encoded files, enabling a remote attacker to trigger a denial of service via an out-of-bounds heap write. The available connected sources confirm the vulnerability and its impact; th...

CVE-2013-0875

FFmpeg is affected by CVE-2013-0875 via the ff_add_png_paeth_prediction function in libavcodec/pngdec.c, vulnerable before version 1.1.3 due to an out-of-bounds array access when processing crafted PNG images. This affects FFmpeg’s PNG decoding path and could enable remote impact. Remediation per...