10946 matches found
CVE-2023-47470
FFmpeg contains a Buffer Overflow in libavcodec/evc_ps.c ref_pic_list_struct that allows a remote attacker to perform an out-of-array write, potentially executing arbitrary code and causing DoS. A fix is committed (4565747056a11356210ed8edcecb920105e40b60); multiple advisories and CNVD/EUVD entri...
CVE-2023-47470
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
CVE-2023-47470
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
CVE-2023-47470
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
CVE-2023-47470
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
CVE-2023-47470
Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service DoS via the refpicliststruct function in libavcodec/evcps.c...
Ubuntu: Security Advisory (USN-6449-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6449-2 ffmpeg regression
USN-6449-1 fixed vulnerabilities in FFmpeg. Unfortunately that update could introduce a regression in tools using an FFmpeg library, like VLC. This updated fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that FFmpeg incorrectly managed memory...
USN-6449-2: FFmpeg regression
USN-6449-1 fixed vulnerabilities in FFmpeg. Unfortunately that update could introduce a regression in tools using an FFmpeg library, like VLC. This updated fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that FFmpeg incorrectly managed memory...
Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM : FFmpeg regression (USN-6449-2)
The remote Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6449-2 advisory. USN-6449-1 fixed vulnerabilities in FFmpeg. Unfortunately that update could introduce a regression in tools using an FFmpeg library, like...
The vulnerability in the libavcodec/aacpsy.c component of the FFmpeg multimedia library allows a hacker to cause a service failure.
The vulnerability of the libavcodec/aacpsy.c component in the FFmpeg multimedia library is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure...
The vulnerability of the fftools/cmdutils.c component in the FFmpeg multimedia library allows a hacker to cause a service failure.
The vulnerability in the fftools/cmdutils.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows an attacker to cause service failures remotely...
Debian DSA-5552-1 : ffmpeg - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5552 advisory. Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if...
Debian: Security Advisory (DSA-5552-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5552-1] ffmpeg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5552-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 12, 2023 https://www.debian.org/security/faq -...
DSA-5552-1 ffmpeg - security update
Bulletin has no description...
ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in ff_jpegxl_parse_codestream_header
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6151006496620544 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...
PT-2023-7934 · FFmpeg · Ffmpeg
Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: The issue is related to a buffer overflow in the FFmpeg multimedia library, which can be exploited to impact the confidentiality, integrity, and availability of protected information...
PT-2023-8229
Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description The issue in the FFmpeg multimedia library is related to insufficient access control. It may allow a remote attacker to elevate their privileges. Recommendations At the moment, there is no...
ffmpeg:ffmpeg_AV_CODEC_ID_FOURXM_fuzzer: Crash in av_fast_realloc
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5854263397711872 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDFOURXMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x010000000084...