Code injection

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

PT-2024-13661 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: Jave2 version 3.3.1 Description: An issue was discovered in Jave2, allowing attackers to execute arbitrary code via the FFmpeg function. Recommendations: For Jave2 version 3.3.1, consider disabling the FFmpeg function until a patch is...

CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

CVE-2023-48909

The CVE-2023-48909 entry concerns Jave2 v3.3.1, where an issue in the FFmpeg function allows attackers to execute arbitrary code. Documents consistently identify the vulnerable component as the FFmpeg function within Jave2 and confirm a remote attack vector with NULL privileges and user interacti...

CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

CVE-2023-48909: Undefined Security Weakness

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

Jave2 Security Vulnerability

JAVE is a Java wrapper for the ffmpeg project. A security vulnerability exists in Jave2 version 3.3.1 that could allow an attacker to execute arbitrary code via FFmpeg functions...

CVE-2023-48909

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function...

PT-2024-6072

Name of the Vulnerable Software and Affected Versions FFmpeg version n6.1 Description The issue is related to a heap buffer overflow vulnerability in the draw block rectangle function of libavfilter/vf codecview.c. This allows attackers to cause undefined behavior or a Denial of Service DoS via...

PT-2023-9660 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg versions n5.1 to n6.1 Description: The issue is related to an Off-by-one Error vulnerability in the libavfilter/avf showspectrum.c component of the FFmpeg library. This vulnerability allows attackers to cause a Denial of Service DoS vi...

The vulnerability of the `av_timecode_make_string` function in the `libavutil/timecode.c` file of the FFmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability of the avtimecodemakestring function in the libavutil/timecode.c file of the FFmpeg multimedia library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created .mov file...

The vulnerability of the smc_encode_stream function in the libavcodec/smcenc.c component of the FFmpeg multimedia library allows a perpetrator to gain access to confidential data and also trigger a service denial.

The vulnerability of the smcencodestream function in the libavcodec/smcenc.c component of the FFmpeg multimedia library relates to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain access to confidential dat...

The vulnerability of the libavcodec/rpzaenc.c component in the FFmpeg multimedia library allows a perpetrator to gain access to confidential data and also trigger a service failure.

The vulnerability of the libavcodec/rpzaenc.c component in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, as well as cause service...

The vulnerability of the `build_open_gop_key_points` function in the `libavformat/mov.c` component of the multimedia library FFmpeg allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the buildopengopkeypoints function in the libavformat/mov.c component of the multimedia library FFmpeg is related to integer overflow. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

GLSA-202312-14 : FFmpeg: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202312-14 FFmpeg: Multiple Vulnerabilities - dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked. CVE-2021-33815 - adtsdecodeextradata in libavformat/adtsenc...

FFmpeg: Multiple Vulnerabilities

Background FFmpeg is a complete solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...

ffmpeg:ffmpeg_BSF_VVC_METADATA_fuzzer: Heap-buffer-overflow in cbs_h266_read_nal_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4665241535119360 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFVVCMETADATAfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

CVE-2023-49096

Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the /Videos//stream and /Videos//stream. endpoints which are present in the current Jellyfin version. Additional endpoints in the...

Design/Logic Flaw

Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the /Videos//stream and /Videos//stream. endpoints which are present in the current Jellyfin version. Additional endpoints in the...