ffmpeg:ffmpeg_AV_CODEC_ID_WMAVOICE_fuzzer: Use-of-uninitialized-value in synth_superframe

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4806127362048000 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWMAVOICEfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

ffmpeg:ffmpeg_dem_MPEGPS_fuzzer: Use-of-uninitialized-value in mpegps_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4684401009557504 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMPEGPSfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_RV40_fuzzer: Use-of-uninitialized-value in ff_er_frame_end

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4615653984632832 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDRV40fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_APAC_fuzzer: Use-of-uninitialized-value in get_code

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5758325067677696 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAPACfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_dem_W64_fuzzer: Use-of-uninitialized-value in w64_read_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5212907590189056 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemW64fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_MVHA_fuzzer: Use-of-uninitialized-value in add_left_pred_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4878509466517504 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMVHAfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_dem_JPEGXL_ANIM_fuzzer: Use-of-uninitialized-value in ff_jpegxl_parse_codestream_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5089407768526848 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemJPEGXLANIMfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_LSCR_fuzzer: Use-of-uninitialized-value in ff_add_png_paeth_prediction

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4759968677429248 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLSCRfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

OPENSUSE-SU-2024:14231-1 ffmpeg-4-4.4.4-12.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.4-12.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14226-1 ffmpeg-6-6.1.1-6.1 on GA media

These are all security issues fixed in the ffmpeg-6-6.1.1-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14221-1 ffmpeg-5-5.1.4-9.1 on GA media

These are all security issues fixed in the ffmpeg-5-5.1.4-9.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14222-1 ffmpeg-7-7.0-3.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.0-3.1 package on the GA media of openSUSE Tumbleweed...

ffmpeg:ffmpeg_AV_CODEC_ID_SNOW_fuzzer: Heap-buffer-overflow in encode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5703668010647552 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSNOWfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6090000002...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Index-out-of-bounds in dequant_scalefactors

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4741427068731392 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACLATMfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Stack-buffer-overflow in ff_hevc_luma_mv_merge_mode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6529417518579712 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_ADPCM_DTK_fuzzer: Heap-buffer-overflow in adpcm_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4814907107770368 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDADPCMDTKfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

[SECURITY] Fedora 40 Update: ffmpeg-6.1.1-19.fc40

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

Fedora 40 : ffmpeg (2024-810afc5c2e)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-810afc5c2e advisory. Backport fix for CVE-2023-49528 and backport fixes for compatibility with Mesa 24.0.6+ / 24.1.4+ for VA- API Tenable has extracted the preceding description...

OESA-2024-1875 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: An integer overflow...

OESA-2024-1873 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: An integer overflow...