CVE-2020-28435

The CVE-2020-28435 entry affects all versions of the Node.js package ffmpeg-sdk . The root cause is a command injection vulnerability in the injection point at line 9 in index.js (function execute), allowing arbitrary commands to be executed. In the reported PoC, an attacker calls root.execute("t...

CVE-2020-28435 Command Injection

This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js...

ffmpeg-sdk 命令注入漏洞

ffmpeg-sdk is a ffmpeg wrapper for nodejs by the individual developer Shajan Jacob in India. A security vulnerability exists in ffmpeg-sdk, which stems from the vulnerability of index.js to command injection attacks...

PT-2022-6681 · FFmpeg +6 · Ffmpeg +6

Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: A null pointer dereference issue was discovered in the decode main header function of the libavformat/nutdec.c file. The flaw occurs because the function lacks a check of the return value of...

FFmpeg HEVC video decoder denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in FFmpeg HEVC video decoder, which can be exploited by attackers to cause a denial of service attack...

FFmpeg ff_init_buffer_info() function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg ffinitbufferinfo function, which can be exploited by an attacker to cause a denial of service attack...

FFmpeg decode_slice_header() function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg decodesliceheader function, which can be exploited by an attacker to cause a denial of service attack...

The vulnerability of the FFmpeg multimedia library in the Debian GNU/Linux operating system allows a perpetrator to trigger an octath in service or execute arbitrary code.

The vulnerability of the FFmpeg multimedia library in the Debian GNU/Linux operating system is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to trigger an octath in the service or execute arbitrary code...

FFmpeg msrle_decode_frame() function denial-of-service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg msrledecodeframe function, which can be exploited by an attacker to cause a denial of service attack...

FFmpeg rpza_decode_stream() Code Execution Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A code execution vulnerability exists in FFmpeg rpzadecodestream, which can be exploited by an attacker to trigger an out-of-bounds read memory access and execute arbitrary code on the syst...

FFmpeg shorten_decode_frame() function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg shortendecodeframe function, which can be exploited by an attacker to cause a denial of service attack...

FFmpeg read_var_block_data() function buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A buffer overflow vulnerability exists in the FFmpeg readvarblockdata function, which can be exploited by an attacker to trigger an out-of-bounds read memory access...

FFmpeg truemotion1_decode_header()拒绝服务漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the Ffmpeg team. FFmpeg truemotion1decodeheader suffers from a denial-of-service vulnerability that can be exploited by attackers to cause a denial-of-service attack...

FFmpeg output_frame() function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg outputframe function, which can be exploited by an attacker to cause a denial of service attack...

FFmpeg decode_vol_header() function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg decodevolheader function, which can be exploited by an attacker to cause a denial of service attack...

FFmpeg decode_nal_unit() denial of service vulnerability

FFmpeg is the Ffmpeg team's complete solution for recording, converting, and streaming audio and video. FFmpeg decodenalunit has a denial of service vulnerability that can be exploited by attackers to cause a denial of service attack...

FFmpeg add_yblock() function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability in the FFmpeg addyblock function can be exploited by an attacker to trigger an out-of-bounds read memory access...

FFmpeg dnxhd_init_rc() denial of service vulnerability

FFmpeg is the Ffmpeg team's complete solution for recording, converting, and streaming audio and video. FFmpeg dnxhdinitrc suffers from a denial-of-service vulnerability that can be exploited by attackers to cause a denial-of-service attack...

FFmpeg get_siz() function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg getsiz function, which can be exploited by attackers to cause a denial of service attack...

FFmpeg Buffer Overflow Vulnerability (CNVD-2022-62522)

FFmpeg is the Ffmpeg team's complete solution for recording, converting, and streaming audio and video. FFmpeg version 2.0 has a security vulnerability that could be exploited by attackers to cause a denial of service attack...