ffmpeg:ffmpeg_dem_MPEGTS_fuzzer: Use-of-uninitialized-value in parse_MP4SLDescrTag

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6044501804646400 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMPEGTSfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

openSUSE Security Advisory (SUSE-SU-2024:3358-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:3358-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: ffmpeg-4 / ffmpeg-4-libavcodec-devel / ffmpeg-4-libavdevice-devel / etc (SUSE-SU-2024:3358-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3358-1 advisory. - Dropped support for libmfx to fix the following CVEs: libmfx: improper input validation...

SUSE-SU-2024:3358-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - Dropped support for libmfx to fix the following CVEs: libmfx: improper input validation CVE-2023-48368, bsc1226897 libmfx: improper buffer restrictions CVE-2023-45221, bsc1226898 libmfx: out-of-bounds read CVE-2023-22656, bsc1226899 libmfx:...

OESA-2024-2155 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg version n5.1 to...

SUSE SLED15: ffmpeg-4 / ffmpeg-4-libavcodec-devel / ffmpeg-4-libavdevice-devel / etc (SUSE-SU-2024:3301-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3301-1 advisory. - CVE-2024-7055: Fixed a heap-based buffer overflow in pnmdec. bsc1229026 Tenable has extracted the...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Use-of-uninitialized-value in ff_hevc_hls_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5427736120721408 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

SUSE-SU-2024:3301-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2024-7055: Fixed a heap-based buffer overflow in pnmdec. bsc1229026...

ffmpeg:ffmpeg_SWS_fuzzer: Heap-buffer-overflow in nv24ToYuv420Wrapper

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5876893532880896 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegSWSfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x52900009a680 Crash...

The vulnerability of the `load_input_picture` function in the FFmpeg multimedia library allows a hacker to execute arbitrary code.

The vulnerability of the loadinputpicture function in the FFmpeg multimedia library lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

OPENSUSE-SU-2024:14343-1 ffmpeg-4-4.4.4-14.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.4-14.1 package on the GA media of openSUSE Tumbleweed...

ffmpeg-4-4.4.4-14.1 on GA media (moderate)

ffmpeg-4-4.4.4-14.1 on GA media Announcement ID: openSUSE-SU-2024:14343-1 Rating: moderate Cross-References: CVE-2024-7055 CVSS scores: CVE-2024-7055 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

ffmpeg-6-6.1.1-9.1 on GA media (moderate)

ffmpeg-6-6.1.1-9.1 on GA media Announcement ID: openSUSE-SU-2024:14344-1 Rating: moderate Cross-References: CVE-2024-7055 CVSS scores: CVE-2024-7055 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

ffmpeg-5-5.1.4-13.1 on GA media (moderate)

ffmpeg-5-5.1.4-13.1 on GA media Announcement ID: openSUSE-SU-2024:14339-1 Rating: moderate Cross-References: CVE-2024-7055 CVSS scores: CVE-2024-7055 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

OPENSUSE-SU-2024:14344-1 ffmpeg-6-6.1.1-9.1 on GA media

These are all security issues fixed in the ffmpeg-6-6.1.1-9.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14339-1 ffmpeg-5-5.1.4-13.1 on GA media

These are all security issues fixed in the ffmpeg-5-5.1.4-13.1 package on the GA media of openSUSE Tumbleweed...

ffmpeg:ffmpeg_dem_QCP_fuzzer: Use-of-uninitialized-value in qcp_read_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4647386712965120 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemQCPfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_EATGQ_fuzzer: Use-of-uninitialized-value in tgq_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5607656650244096 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDEATGQfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

The vulnerability of the libavfilter/vfcodecview.c component of the FFmpeg multimedia library involves an operation that occurs outside the buffer boundaries in memory. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the libavfilter/vfcodecview.c component in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause...