Lucene search
+L

7733 matches found

ossfuzz
ossfuzz
added 2019/10/21 4:59 a.m.18 views

ffmpeg:ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Index-out-of-bounds in decodeplane8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5767030560522240 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDIFFILBMfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2019/10/20 7:18 a.m.19 views

ffmpeg:ffmpeg_AV_CODEC_ID_WMAV1_fuzzer: Heap-buffer-overflow in ff_wma_run_level_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5769439500304384 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWMAV1fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

6.8AI score
SaveExploits0Affected Software1
NVD
NVD
added 2019/10/19 2:15 p.m.19 views

CVE-2019-18214

The VideoConverter app 0.1.0 for Nextcloud allows denial of service CPU and memory consumption via multiple concurrent conversions because many FFmpeg processes may be running at once. The workload is not queued for serial execution...

7.7CVSS7.5AI score0.01388EPSS
SaveExploits1References1
OSV
OSV
added 2019/10/19 2:15 p.m.9 views

CVE-2019-18214

The VideoConverter app 0.1.0 for Nextcloud allows denial of service CPU and memory consumption via multiple concurrent conversions because many FFmpeg processes may be running at once. The workload is not queued for serial execution...

7.7CVSS7.1AI score
SaveExploits0References1
Prion
Prion
added 2019/10/19 2:15 p.m.15 views

Design/Logic Flaw

The VideoConverter app 0.1.0 for Nextcloud allows denial of service CPU and memory consumption via multiple concurrent conversions because many FFmpeg processes may be running at once. The workload is not queued for serial execution...

6.8CVSS7.5AI score0.01388EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2019/10/19 1:32 p.m.122 views

CVE-2019-18214

The CVE-2019-18214 entry concerns the Video_Converter app 0.1.0 for Nextcloud. The underlying issue is a denial-of-service condition caused by running many FFmpeg processes concurrently; the workload is not serialized, allowing CPU and memory usage to spike. Affected component is the Video_Conver...

7.7CVSS7.4AI score0.01388EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2019/10/19 1:32 p.m.22 views

CVE-2019-18214

The VideoConverter app 0.1.0 for Nextcloud allows denial of service CPU and memory consumption via multiple concurrent conversions because many FFmpeg processes may be running at once. The workload is not queued for serial execution...

7.7CVSS7.5AI score0.01388EPSS
SaveExploits1References1
ossfuzz
ossfuzz
added 2019/10/19 6:25 a.m.17 views

ffmpeg:ffmpeg_AV_CODEC_ID_COOK_fuzzer: Index-out-of-bounds in interpolate_float

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5641398941908992 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDCOOKfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2019/10/18 8:8 p.m.21 views

ffmpeg:ffmpeg_AV_CODEC_ID_ATRAC3P_fuzzer: Index-out-of-bounds in decode_channel_wordlen

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5643794862571520 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDATRAC3Pfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2019/10/18 10:7 a.m.17 views

ffmpeg:ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Global-buffer-overflow in dequantize

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5641113058148352 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDATRAC9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

6.8AI score
SaveExploits0Affected Software1
Veracode
Veracode
added 2019/10/18 8:14 a.m.29 views

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS. The vulnerability is possible because it causes an out-of-array access in the function vqadecodeinit of vqavideo.c, leading to a buffer overflow in vqadecodechunk...

9.8CVSS4AI score0.02305EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/10/15 12:0 a.m.26 views

SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2019:1299-2)

This update for ffmpeg fixes the following issues : Security issue fixed : CVE-2018-14395: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a DoS bsc1101889 CVE-2018-14394: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a D...

6.5CVSS6.1AI score0.02035EPSS
SaveExploits0References7
OSV
OSV
added 2019/10/14 3:51 p.m.9 views

SUSE-SU-2019:1299-2 Security update for ffmpeg

This update for ffmpeg fixes the following issues: Security issue fixed: - CVE-2018-14395: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a DoS bsc1101889 - CVE-2018-14394: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a...

6.5CVSS6.5AI score0.02035EPSS
SaveExploits0References5
NVD
NVD
added 2019/10/14 2:15 a.m.28 views

CVE-2019-17542

FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...

9.8CVSS9.7AI score0.02305EPSS
SaveExploits0References7
NVD
NVD
added 2019/10/14 2:15 a.m.20 views

CVE-2019-17539

In FFmpeg before 4.2, avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

9.8CVSS9.6AI score0.02012EPSS
SaveExploits0References6
OSV
OSV
added 2019/10/14 2:15 a.m.24 views

CVE-2019-17539

In FFmpeg before 4.2, avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

9.8CVSS6.8AI score
SaveExploits0References6
OSV
OSV
added 2019/10/14 2:15 a.m.2 views

DEBIAN-CVE-2019-17539

In FFmpeg before 4.2, avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

9.8CVSS6.9AI score0.02012EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/14 2:15 a.m.34 views

CVE-2019-17542

FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...

9.8CVSS7.2AI score
SaveExploits0References7
Prion
Prion
added 2019/10/14 2:15 a.m.27 views

Null pointer dereference

In FFmpeg before 4.2, avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

7.5CVSS9.5AI score0.02012EPSS
SaveExploits0References6Affected Software3
UbuntuCve
UbuntuCve
added 2019/10/14 2:15 a.m.32 views

CVE-2019-17539

In FFmpeg before 4.2, avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

9.8CVSS6.8AI score0.02012EPSS
SaveExploits0References3
Rows per page
Query Builder