CVE-2021-28429

Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...

FFmpeg 代码问题漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 4.3, which stems from a flaw in the decodeframe function in the libavcodec/tiff.c file. No details of the vulnerability are available at th...

CVE-2020-36138

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

CVE-2020-36138

CVE-2020-36138 affects FFmpeg 4.3: the decode_frame function in libavcodec/tiff.c is vulnerable, allowing remote attackers to cause a denial-of-service. The issue is documented across multiple connected sources (NVD and OSV entries) with the same description; no exploit details or mitigation step...

CVE-2020-36138

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

CVE-2020-36138

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

CVE-2021-28429

CVE-2021-28429 : FFmpeg’s libavutil/timecode.c function av_timecode_make_string contains an integer overflow that can be exploited by a crafted .mov file to cause a local DoS. Affected component: FFmpeg 4.3.2 (timecode handling). Impact is denial of service via crafted MOV input; exploitation is ...

CVE-2021-28429: Integer Overflow or Wraparound

Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...

FFmpeg Input Validation Error Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 4.3.2, which originates from an integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c, which allows local attacker...

CVE-2020-36138: NULL Pointer Dereference

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

CVE-2020-36138

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

PT-2023-11808

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3 Description An issue was discovered in decode frame in libavcodec/tiff.c, allowing remote attackers to cause a denial of service DoS. Recommendations For FFmpeg version 4.3, consider updating to a newer version to mitigate t...

CVE-2021-28429

Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...

CVE-2021-28429

Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...

CVE-2020-36138

An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

CVE-2021-28429

Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...

Arbitrary Code Execution

chromium is vulnerable to Arbitrary Code Execution. The vulnerability exists in FFmpeg in Google Chromewhich allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

ffmpeg:ffmpeg_BSF_VVC_METADATA_fuzzer: Index-out-of-bounds in cbs_h266_read_vps

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6709397181825024 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFVVCMETADATAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

Ffmpeg Code Execution Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A code execution vulnerability exists in FFmpeg 0.7.0 and earlier versions, which stems from a failure to properly filter special elements of the constructor snippet in the component...

Code Injection

net.bramp.ffmpeg:ffmpeg is vulnerable to Code Injection. An FFmpeg object can be created using the constructor in FFmpeg.java, but it does not validate the ffmpeg executable path, which allow an attacker to execute malicious code on the system...