CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

CVE-2023-48909

The CVE-2023-48909 entry concerns Jave2 v3.3.1, where an issue in the FFmpeg function allows attackers to execute arbitrary code. Documents consistently identify the vulnerable component as the FFmpeg function within Jave2 and confirm a remote attack vector with NULL privileges and user interacti...

PT-2024-6072 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1 Description: The issue is related to a heap buffer overflow vulnerability in the draw block rectangle function of libavfilter/vf codecview.c. This allows attackers to cause undefined behavior or a Denial of Service DoS via...

PT-2023-9660 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg versions n5.1 to n6.1 Description: The issue is related to an Off-by-one Error vulnerability in the libavfilter/avf showspectrum.c component of the FFmpeg library. This vulnerability allows attackers to cause a Denial of Service DoS vi...

The vulnerability of the smc_encode_stream function in the libavcodec/smcenc.c component of the FFmpeg multimedia library allows a perpetrator to gain access to confidential data and also trigger a service denial.

The vulnerability of the smcencodestream function in the libavcodec/smcenc.c component of the FFmpeg multimedia library relates to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain access to confidential dat...

GLSA-202312-14 : FFmpeg: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202312-14 FFmpeg: Multiple Vulnerabilities - dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked. CVE-2021-33815 - adtsdecodeextradata in libavformat/adtsenc...

The vulnerability of the `build_open_gop_key_points` function in the `libavformat/mov.c` component of the multimedia library FFmpeg allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the buildopengopkeypoints function in the libavformat/mov.c component of the multimedia library FFmpeg is related to integer overflow. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the `av_timecode_make_string` function in the `libavutil/timecode.c` file of the FFmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability of the avtimecodemakestring function in the libavutil/timecode.c file of the FFmpeg multimedia library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created .mov file...

The vulnerability of the libavcodec/rpzaenc.c component in the FFmpeg multimedia library allows a perpetrator to gain access to confidential data and also trigger a service failure.

The vulnerability of the libavcodec/rpzaenc.c component in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, as well as cause service...

FFmpeg: Multiple Vulnerabilities

Background FFmpeg is a complete solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...

CVE-2023-49096

Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the /Videos//stream and /Videos//stream. endpoints which are present in the current Jellyfin version. Additional endpoints in the...

Design/Logic Flaw

Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the /Videos//stream and /Videos//stream. endpoints which are present in the current Jellyfin version. Additional endpoints in the...

CVE-2023-49096 Argument Injection in FFmpeg codec parameters in Jellyfin

Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the /Videos//stream and /Videos//stream. endpoints which are present in the current Jellyfin version. Additional endpoints in the...

CVE-2023-49096 Argument Injection in FFmpeg codec parameters in Jellyfin

Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the /Videos//stream and /Videos//stream. endpoints which are present in the current Jellyfin version. Additional endpoints in the...

CVE-2023-49096 Argument Injection in FFmpeg codec parameters in Jellyfin

Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the /Videos//stream and /Videos//stream. endpoints which are present in the current Jellyfin version. Additional endpoints in the...

PT-2023-9218 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg versions v.n6.1-3-g466799d4f5 Description: The issue is related to a buffer overflow vulnerability in the set encoder id function, located in the /fftools/ffmpeg enc.c component. This vulnerability can be exploited by an attacker to...

PT-2024-15023

Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description A flaw was found in FFmpeg's TTY Demuxer, allowing possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists. Recommendations At the moment, there is no...

PT-2024-15022

Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description A flaw was found in FFmpeg's HLS demuxer, allowing bypassing of unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file...

Privilege Escalation

ffmpeg is vulnerable to Privilege Escalation...

PT-2023-9358 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: Ffmpeg version v.n6.1-3-g466799d4f5 Description: The issue is related to a buffer overflow in the av malloc function, located in the libavutil/mem.c component of the Ffmpeg library. This buffer overflow is caused by copying without checking t...