Debian: Security Advisory (DSA-5394-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5394-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5394-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 30, 2023 https://www.debian.org/security/faq -...

Use After Free

ffmpeg is vulnerable to Use After Free. vulnerability occurs in 'libavcodec/pthreadframe.c' due to stale hwaccel state in worker threads which allows an attacker to trigger use after free...

DSA-5394-1 ffmpeg - security update

Bulletin has no description...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_fuzzer: Invalid-free in av_freep

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5089709973176320 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDJPEG2000fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Invalid-free Crash Address: 0x7fff988acf...

Fedora 36 : ffmpeg (2023-1e24db98a6)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-1e24db98a6 advisory. New release with bug fixes across the tree Contains security fixes for CVE-2022-48434 and CVE-2022-3109. Tenable has extracted the preceding...

Fedora: Security Advisory for ffmpeg (FEDORA-2023-1e24db98a6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: ffmpeg-5.0.3-1.fc36

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEGLS_fuzzer: Heap-buffer-overflow in mjpeg_decode_scan

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5122999065116672 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDJPEGLSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Segv on unknown address in av_freep

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5110328710266880 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in pps_multilayer_extension

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4505349045747712 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in fill_virtual_tracks

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5141262172028928 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegDEMUXERfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x610000000500 Cra...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Memcpy-param-overlap in put_hevc_pel_uni_pixels_9

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4717458841010176 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

Fedora: Security Advisory for ffmpeg (FEDORA-2023-32c3bbbbc9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 37 : ffmpeg (2023-32c3bbbbc9)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-32c3bbbbc9 advisory. New release with bug fixes across the tree Contains security fix for CVE-2022-48434 . Tenable has extracted the preceding description block directly from the...

ffmpeg:ffmpeg_AV_CODEC_ID_MPEGVIDEO_fuzzer: Heap-buffer-overflow in p8idct

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4860646427852800 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMPEGVIDEOfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_MPEG2VIDEO_fuzzer: Heap-buffer-overflow in ff_add_pixels_clamped_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4526419991724032 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMPEG2VIDEOfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_MPEG2VIDEO_fuzzer: Heap-buffer-overflow in put_pixels16_8_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6094366187061248 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMPEG2VIDEOfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Index-out-of-bounds in pps_multilayer_extension

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4536557859373056 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

Ffmpeg Resource Management Error Vulnerability (CNVD-2025-01694)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg versions prior to 5.1.2. An attacker can exploit this vulnerability to execute arbitrary code...