ffmpeg:ffmpeg_AV_CODEC_ID_HCOM_fuzzer: Heap-buffer-overflow in hcom_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5634188581011456 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDHCOMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60c000000f1...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBFDK_AAC_fuzzer: Index-out-of-bounds in processDrcTime

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5699860921057280 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cra...

ffmpeg:ffmpeg_AV_CODEC_ID_HCOM_fuzzer: Heap-buffer-overflow in hcom_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5674970478280704 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHCOMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

PT-2019-6178 · FFmpeg +3 · Ffmpeg +3

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2.1 Description: A CWE-125: Out-of-bounds read issue exists in the long term filter function in g729postfilter.c during computation of the denominator of pseudo-normalized correlation R'0, that could result in disclosure of...

[SECURITY] Fedora 29 Update: kmplayer-0.12.0b-1.fc29

KMPlayer, a simple front-end for MPlayer/FFMpeg/Phonon. It can play DVD/VCD movies, from file or URL and from a video device. KMPlayer can embed inside Konqueror. Which means if you click on a movie file, the movie is played inside Konqueror...

[SECURITY] Fedora 30 Update: kmplayer-0.12.0b-1.fc30

KMPlayer, a simple front-end for MPlayer/FFMpeg/Phonon. It can play DVD/VCD movies, from file or URL and from a video device. KMPlayer can embed inside Konqueror. Which means if you click on a movie file, the movie is played inside Konqueror...

Fedora Update for kmplayer FEDORA-2019-9b1da08d62

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2019-6454 · FFmpeg +3 · Ffmpeg +3

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: The issue is related to a memory leak in the filter frame function of the vf tile.c component in the FFmpeg multimedia library. This is due to incorrect memory deallocation before removing the last reference...

PT-2019-6073 · FFmpeg +3 · Ffmpeg +3

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: The issue is related to a Buffer Overflow in the lagfun frame16 function within the libavfilter/vf lagfun.c component of the FFmpeg library. This could allow a remote malicious user to cause Denial of Service...

PT-2021-10719 · FFmpeg +3 · Ffmpeg +3

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: A Denial of Service issue exists due to a memory leak in the v frame alloc function in frame.c. Recommendations: For FFmpeg version 4.2, update to a version that fixes the memory leak in the v frame alloc...

PT-2021-5788

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A heap-based Buffer Overflow issue exists in the deflate16 function of the FFmpeg library, specifically in the libavfilter/vf neighbor.c file. This could lead to memory corruption and other potential consequences...

PT-2021-5793

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description A heap-based Buffer Overflow issue exists in FFmpeg, specifically at libavfilter/vf floodfill.c, which may lead to memory corruption and other potential consequences. This issue is related to a buffer overflow...

PT-2019-6244 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: The issue is related to a memory leak in the avcodec alloc context3 function at options.c in the FFmpeg library. This leak occurs due to incorrect memory deallocation before the last reference is removed...

PT-2019-6455 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: The issue is related to a memory leak in the ff v4l2 m2m create context function in v4l2 m2m.c of the FFmpeg multimedia library. This leak occurs due to incorrect memory deallocation before the removal of the...

PT-2021-10718 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: A Denial of Service issue exists due to a memory leak in the inavi add ientry function. Recommendations: For FFmpeg version 4.2, at the moment, there is no information about a newer version that contains a fix...

PT-2021-4514 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: Ffmpeg affected versions not specified Description: The issue is related to a heap-based Buffer Overflow vulnerability in the gaussian blur component of the Ffmpeg library. This vulnerability can be exploited by a remote attacker to gain acce...

PT-2021-5792 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: The issue is related to a heap-based Buffer Overflow Vulnerability in the convolution y 8bit function of the FFmpeg library. This vulnerability could allow a remote attacker to cause a Denial of Service. The...

PT-2021-4627 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: A heap-based Buffer Overflow issue exists in the gaussian blur component of the FFmpeg library, specifically at libavfilter/vf edgedetect.c. This could lead to memory corruption and other potential consequences...

PT-2021-5786 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: A heap-based Buffer Overflow issue exists in the ff fill rectangle function at libavfilter/drawutils.c, potentially leading to memory corruption. This could allow a remote attacker to access confidential data,...

ffmpeg:ffmpeg_AV_CODEC_ID_THP_fuzzer: Heap-buffer-overflow in ljpeg_decode_rgb_scan

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5763147314495488 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTHPfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...