[SECURITY] Fedora 40 Update: ffmpeg-6.1.1-19.fc40

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

Fedora 40 : ffmpeg (2024-810afc5c2e)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-810afc5c2e advisory. Backport fix for CVE-2023-49528 and backport fixes for compatibility with Mesa 24.0.6+ / 24.1.4+ for VA- API Tenable has extracted the preceding description...

OESA-2024-1873 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: An integer overflow...

OESA-2024-1876 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: An integer overflow...

OESA-2024-1875 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: An integer overflow...

ffmpeg:ffmpeg_AV_CODEC_ID_SNOW_fuzzer: Crash in ff_sad16_mmxext

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5751882631413760 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSNOWfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x780b5e03d00a...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer: Heap-use-after-free in aac_decode_frame_int

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6007809271988224 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAACFIXEDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Segv on unknown address in boundary_strength

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5908731129298944 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Global-buffer-overflow in decode_usac_core_coder

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6723855293415424 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDAACLATMfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash...

OESA-2024-1833 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: Integer overflow...

OESA-2024-1804 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: adtsdecodeextradata in...

OESA-2024-1806 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: adtsdecodeextradata in...

The vulnerability of the config_eq_output component (libavfilter/asrc_afirsrc.c) in the FFmpeg multimedia library allows a attacker to execute arbitrary code.

The vulnerability of the configeqoutput component libavfilter/asrcafirsrc.c in the FFmpeg multimedia library is related to buffer overflow in the “queue” mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the libavcodec/cbs_h266_syntax_template.c file in the multimedia library FFmpeg allows a hacker to execute arbitrary code.

The vulnerability in the libavcodec/cbsh266syntaxtemplate.c file of the multimedia library FFmpeg is related to unvalidated array indexing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the av_samples_set_silence component (libavutil/samplefmt.c) in the FFmpeg multimedia library allows a attacker to disclose protected information.

The vulnerability of the avsamplessetsilence component libavutil/samplefmt.c in the FFmpeg multimedia library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the ff_gaussian_blur_8 component (libavfilter/edge_template.c) in the FFmpeg multimedia library allows a perpetrator to execute arbitrary code.

The vulnerability of the ffgaussianblur8 component libavfilter/edgetemplate.c in the FFmpeg multimedia library is related to buffer overflow in the “cull” function. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the component `spexrmpict_request_frame` (libavfilter/avf_showspectrum.c) in the FFmpeg multimedia library allows a attacker to execute arbitrary code.

The vulnerability of the spectrumpicrequestframe component in the FFmpeg multimedia library libavfilter/avfshowspectrum.c is related to buffer overflow in the “cue” section. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Ffmpeg load_input_picture buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version 7.0, which stems from a boundary error in loadinputpicture in libavcodec/mpegvideoenc.c:1216:21 when handling untrusted input. A...

Ffmpeg copy_column buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version 7.0, which stems from a boundary error in the copycolumn parameter of libavfilter/vftiltandshift.c:189:5 when handling untrusted...

Ffmpeg hevc_frame_end Buffer Overflow Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version 7.0, which stems from a boundary error in hevcframeend in libavcodec/hevcdec.c:2947:22 when handling untrusted input. A remote...