DSA-4502-1 ffmpeg - security update

Bulletin has no description...

PT-2021-7396 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 Description: The issue is related to an assertion failure at src/libavutil/mathematics.c in the FFmpeg library. This can be exploited by a remote attacker to cause a denial of...

ffmpeg:ffmpeg_AV_CODEC_ID_QDM2_fuzzer: Index-out-of-bounds in qdm2_synthesis_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5679142481166336 Project: ffmpeg Fuzzing engine: libFuzzer Fuzz target: ffmpegAVCODECIDQDM2fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_WMV3IMAGE_fuzzer: Index-out-of-bounds in vc1_decode_ac_coeff

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5672735195267072 Project: ffmpeg Fuzzing engine: libFuzzer Fuzz target: ffmpegAVCODECIDWMV3IMAGEfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cra...

ffmpeg/ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Global-buffer-overflow in dequantize

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5648247961419776 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDATRAC9fuzzer Fuzz target binary: ffmpegAVCODECIDATRAC9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ ...

ffmpeg/ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Memcpy-param-overlap in cmap_read_palette

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5678750575886336 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDIFFILBMfuzzer Fuzz target binary: ffmpegAVCODECIDIFFILBMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_RALF_fuzzer: Index-out-of-bounds in decode_channel

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5086088934195200 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDRALFfuzzer Fuzz target binary: ffmpegAVCODECIDRALFfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

ffmpeg/ffmpeg_AV_CODEC_ID_LIBVORBIS_fuzzer: Heap-buffer-overflow in oggpack_read

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5760920873074688 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBVORBISfuzzer Fuzz target binary: ffmpegAVCODECIDLIBVORBISfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Heap-buffer-overflow in filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5705501601431552 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDCFHDfuzzer Fuzz target binary: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

ffmpeg/ffmpeg_DEMUXER_fuzzer: Crash in avio_read

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5649290914955264 Project: ffmpeg Fuzzer: libFuzzerffmpegDEMUXERfuzzer Fuzz target binary: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

ffmpeg/ffmpeg_DEMUXER_fuzzer: Index-out-of-bounds in cbs_av1_read_frame_size_with_refs

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5758807440883712 Project: ffmpeg Fuzzer: libFuzzerffmpegDEMUXERfuzzer Fuzz target binary: ffmpegDEMUXERfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_LIBFDK_AAC_fuzzer: Index-out-of-bounds in prepareDrcGain

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5756080707076096 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_MSA1_fuzzer: Index-out-of-bounds in rac_get_model256_sym

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5630676251967488 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMSA1fuzzer Fuzz target binary: ffmpegAVCODECIDMSA1fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

ffmpeg/ffmpeg_AV_CODEC_ID_VQA_fuzzer: Heap-buffer-overflow in vqa_decode_chunk

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5657368257363968 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDVQAfuzzer Fuzz target binary: ffmpegAVCODECIDVQAfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

FFmpeg <= 4.1.3 Multiple Vulnerabilities

FFmpeg is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation;...

Updated ffmpeg packages fix security vulnerability

This update provides ffmpeg version 4.1.4, which fixes several security vulnerabilities and other bugs which were corrected upstream...

MGASA-2019-0208 Updated ffmpeg packages fix security vulnerability

This update provides ffmpeg version 4.1.4, which fixes several security vulnerabilities and other bugs which were corrected upstream...

ffmpeg/ffmpeg_AV_CODEC_ID_IDF_fuzzer: Null-dereference READ with empty stacktrace

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5658616977162240 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDIDFfuzzer Fuzz target binary: ffmpegAVCODECIDIDFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Null-dereference READ...

FFmpeg Code Problem Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A code issue vulnerability exists in FFmpeg version 4.1.3. The vulnerability arises from a design or implementation issue during code development for a networked system or product. No detai...

ffmpeg/ffmpeg_AV_CODEC_ID_MSS2_fuzzer: Index-out-of-bounds in vc1_decode_ac_coeff

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5666071933091840 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMSS2fuzzer Fuzz target binary: ffmpegAVCODECIDMSS2fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...