CVE-2012-2796

CVE-2012-2796 affects FFmpeg up to 0.11 and Libav up to 0.8.x up to 0.8.4. The vulnerability is in vc1_decode_frame (libavcodec/vc1dec.c), tied to inconsistencies in coded slice positions and interlacing that trigger out-of-bounds writes. The impact is described as complete confidentiality, integ...

CVE-2012-2792

CVE-2012-2792 concerns FFmpeg, specifically an unspecified vulnerability in the decode_init function within libavcodec/wmalosslessdec.c, affecting FFmpeg versions before 0.11. The provided connected documents do not reveal concrete details about the root cause beyond “related to the samples per f...

CVE-2012-2789

CVE-2012-2789 affects FFmpeg (before 0.11) and Libav (0.7.x before 0.7.7; 0.8.x before 0.8.4) due to an unspecified vulnerability in avi_read_packet() in libavformat/avidec.c related to a large number of vector coded coefficients (num_vec_coeffs). The advisory provides no explicit impact vector b...

CVE-2012-2798

Unspecified vulnerability in the decodedds1 function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."...

CVE-2012-2799

Unspecified vulnerability in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "put bit buffer when numsavedbits is reset."...

CVE-2012-2774

FFmpeg vulnerability CVE-2012-2774 affects libavcodec/mpegvideo.c:ff_MPV_frame_start, with FFmpeg versions before 0.11. Remote memory corruption possible by starting a frame outside the SETUP state. Mitigation: upgrade to FFmpeg 0.11 or later (per public advisories).

CVE-2012-2786

CVE-2012-2786 is a Libav/FFmpeg vulnerability in the decode_wdlt path (libavcodec/dfa.c) that causes an out-of-bounds write when width/height are not correctly handled. Affected products and versions from connected sources include FFmpeg prior to 0.11 and Libav prior to 0.7.7 (0.7.x) and 0.8.4 (0...

CVE-2012-2788

CVE-2012-2788 affects FFmpeg (libavformat/avidec.c) and Libav; it is caused by an out-of-bounds read in avi_read_packet when a packet is shrunk. The issue is fixed in FFmpeg >=0.11 and Libav 0.7.7/0.8.4 or later (per connected advisories, e.g., avidec: use actually read size instead of request...

CVE-2012-2775

Root-cause: An unspecified vulnerability in read_var_block_data within FFmpeg’s libavcodec/alsdec.c and Libav’s decoders allows an out-of-bounds write in quant_cof, tied to a large order. Affected versions exist for FFmpeg before 0.11 and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4. Impact is...

CVE-2012-2775

Unspecified vulnerability in the readvarblockdata function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large order and an "out of array write in quantcof."...

CVE-2012-2794

Unspecified vulnerability in the decodembinfo function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors in which the "allocated tile size ... mismatches parameters."...

CVE-2012-2795

FFmpeg is affected by CVE-2012-2795 in libavcodec/wmalosslessdec.c, where three issues are described: (1) improper handling of the size of mclms arrays, (2) a get_bits(0) scenario in decode_ac_filter, and (3) too many bits processed in decode_channel_residues. Public advisories (Mandriva MDVSA-20...

CVE-2012-2799

FFmpeg before 0.11 contains an unspecified vulnerability in libavcodec/wmalosslessdec.c related to the behavior of the put bit buffer when num_saved_bits is reset. The impact and attack vectors are not clearly defined in the provided sources. The issue is documented across multiple feeds (NVD, Re...

CVE-2012-2801

CVE-2012-2801 is a vulnerability in FFmpeg (libavcodec/avs.c) affecting FFmpeg up to 0.11 and Libav up to 0.7.x before 0.7.7 and 0.8.x before 0.8.4. The issue relates to dimensions handling and “out of array writes” in the AVS path, with unknown impact and attack vectors per the CVE description, ...

CVE-2012-2794

The CVE-2012-2794 entry concerns FFmpeg up to 0.11 and Libav up to 0.7.x before 0.7.7 and 0.8.x before 0.8.4, affecting the indeo5 decoder. The root issue is in decode_mb_info where the allocated tile size may not match the parameters, allowing a mis-sized write into the tile data. This is descri...

CVE-2012-2797

CVE-2012-2797 affects FFmpeg (libavcodec/mpegaudiodec.c) prior to 0.11 and Libav prior to 0.8.5. The issue is caused by a calculation that prevents a frame from being ‘large enough,’ as described in the initial document; no public exploit/vector details are provided here. Several connected adviso...

CVE-2012-2793

CVE-2012-2793 affects FFmpeg up to version 0.11 and Libav up to 0.7.x before 0.7.7 and 0.8.x before 0.8.4, in the lag_decode_zero_run_line function of libavcodec/lagarith.c. The vulnerability is described as an attack related to “too many zeros” with unknown impact and attack vectors in the initi...

CVE-2012-2803

CVE-2012-2803 describes a double-free vulnerability in the FFmpeg/Libav code path, specifically in the mpeg_decode_frame function (libavcodec/mpeg12.c). Affected products include FFmpeg prior to 0.11 and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5. The description notes the impact as unknown,...

CVE-2012-2789

Unspecified vulnerability in the avireadpacket function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large number of vector coded coefficients numveccoeffs...

CVE-2012-2790

CVE-2012-2790 affects FFmpeg prior to 0.11 and Libav prior to 0.7.7 (Libav 0.7.x) and 0.8.4 (Libav 0.8.x). The flaw is an unspecified issue in read_var_block_data() within libavcodec/alsdec.c in BGMC mode that can impact decoding samples. Concrete details: the vulnerability is tied to the number ...