ffmpeg: Stack-buffer-overflow in ff_htmlmarkup_to_ass

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6380176053108736 Target: ffmpeg Fuzzer: libFuzzerffmpegSUBTITLEAVCODECIDSUBRIPfuzzer Fuzzer binary: ffmpegSUBTITLEAVCODECIDSUBRIPfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 1...

PT-2016-3052

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 54.0.2840.98 for Mac Google Chrome versions prior to 54.0.2840.99 for Windows Google Chrome versions prior to 54.0.2840.100 for Linux Google Chrome versions prior to 55.0.2883.84 for Android Description The issu...

The vulnerability of the FFmpeg multimedia library allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the strreadpacket function in the FFmpeg multimedia library libavformat/psxstr.c is caused by buffer overflows on the stack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code terminate the application using a specially...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious SWF file to the system, resulting in an infinite loop that can lead to a denial of service...

openSUSE Security Update : ffmpeg (openSUSE-2016-1203)

This update for ffmpeg fixes multiple security issues in ffmpeg boo1003806 These vulnerabilities can be triggered when processing specially crafted avi video content, and could lead to crashes or have unspecified further impact including potential code execution. - CVE-2016-7562: out-of-bounds...

OPENSUSE-SU-2016:2560-1 Security update for ffmpeg

This update for ffmpeg fixes multiple security issues in ffmpeg boo1003806 These vulnerabilities can be triggered when processing specially crafted avi video content, and could lead to crashes or have unspecified further impact including potential code execution. - CVE-2016-7562: out-of-bounds...

OPENSUSE-SU-2016:2556-1 Security update for ffmpeg

This update for ffmpeg fixes multiple security issues in ffmpeg boo1003806 These vulnerabilities can be triggered when processing specially crafted avi video content, and could lead to crashes or have unspecified further impact including potential code execution. - CVE-2016-7562: out-of-bounds...

PT-2016-7421

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue allows remote attackers to cause a denial of service by utilizing a crafted AVI file, which results in a NULL pointer being used. This is due to a problem in the read gab2 sub function locat...

PT-2016-7394

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue allows remote attackers to cause a denial of service via a crafted AVI file, specifically through the avi read seek function in libavformat/avidec.c. Recommendations For versions prior to...

PT-2016-7388

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue allows remote attackers to cause a denial of service, specifically a buffer overflow, by providing a crafted AVI file. This is due to a problem in the ff draw pc font function. Recommendatio...

PT-2016-7385

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue arises from a memory leak in the avi read header function when decoding an AVI file with a crafted "strh" structure. Recommendations For versions prior to 3.1.4, update to version 3.1.4 or...

PT-2016-7351

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue is related to the cavs idct8 add c function in libavcodec/cavsdsp.c, which is vulnerable to reading out-of-bounds memory when decoding with cavs decode. Recommendations For versions prior to...

openSUSE Security Update : ffmpeg (openSUSE-2016-1160)

ffmpeg was updated to 2.8.8 to fix the following issues, both bugs and security issues : - avformat/oggparsevp8: fix pts calculation on pages ending with an invisible frame - avcodec/mjpegdec: Do not try to detect last scan but apply idct after all scans for progressive jpeg -...

ffmpeg array out-of-bounds vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A security vulnerability exists in ffmpeg3.1.4 where an...

ffmpeg denial of service vulnerability (CNVD-2016-08733)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A denial of service vulnerability exists in avireadniko...

ffmpeg array out-of-bounds vulnerability (CNVD-2016-08732)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A security vulnerability exists in the use of incorrect...

ffmpeg array out-of-bounds vulnerability (CNVD-2016-08731)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A security vulnerability exists in the use of incorrect...

ffmpeg denial of service vulnerability (CNVD-2016-08729)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A denial of service vulnerability exists in avireadseek...

ffmpeg Contingency Disposal Error Vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams. Under the LGPL or GPL license. It provides a complete solution for recording, converting, and streaming audio and video. A security vulnerability in readgab2sub in ffmpeg3.1.4...

FFmpeg Denial of Service Vulnerability (CNVD-2016-08274)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in FFmpeg version 3.1.2. An attacker can exploit this vulnerability to cause a denial of service...