CVE-2022-3964

A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument ysize leads to out-of-bounds read. It is possible to initiate the attack remotely. The...

ffmpeg:ffmpeg_AV_CODEC_ID_TRUEHD_fuzzer: Index-out-of-bounds in output_data

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5149590118858752 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTRUEHDfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

PT-2022-7212

Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description The issue is related to the smc encode stream function in the libavcodec/smcenc.c component of the FFmpeg library. It involves an out-of-bounds read due to the manipulation of the y size...

PT-2022-7211

Name of the Vulnerable Software and Affected Versions ffmpeg affected versions not specified Description A problematic vulnerability has been found in ffmpeg, affecting the component QuickTime RPZA Video Encoder in the file libavcodec/rpzaenc.c. The manipulation of the argument y size leads to an...

ffmpeg -- multiple vulnerabilities

NVD reports: An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability. A null pointer dereference issue was discovered in 'FFmpeg' in decodemainheader...

Mageia: Security Advisory (MGASA-2022-0416)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0416 Updated ffmpeg packages fix security vulnerability

This update provides ffmpeg version 4.3.5, which fixes several security vulnerabilities and other bugs which were corrected upstream...

Updated ffmpeg packages fix security vulnerability

This update provides ffmpeg version 4.3.5, which fixes several security vulnerabilities and other bugs which were corrected upstream...

PT-2022-37582 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: ffmpeg versions prior to 4.3.5 Description: This issue concerns several security vulnerabilities and bugs in ffmpeg. The vulnerabilities were corrected upstream. Recommendations: For versions prior to 4.3.5, update to version 4.3.5 to resolve...

Debian: Security Advisory (DLA-3178-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3178-1] ffmpeg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3178-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler November 04, 2022 https://wiki.debian.org/LTS -...

DLA-3178-1 ffmpeg - security update

Bulletin has no description...

Debian: Security Advisory (DSA-5268-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5268-1 : ffmpeg - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5268 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The...

[SECURITY] [DSA 5268-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5268-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 01, 2022 https://www.debian.org/security/faq -...

DSA-5268-1 ffmpeg - security update

Bulletin has no description...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_fuzzer: Heap-buffer-overflow in dng_decode_jpeg

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4849108968144896 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTIFFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

FFmpeg wtvdec Heap Buffer Overflow DoS

The vulnerability of the wtvfileopensector function in the wtvdec.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause service interruptions...

FFmpeg Buffer Overflow Vulnerability (CNVD-2022-70582)

FFmpeg is software developed by individual developers that performs recording, converting, and streaming functions for a wide range of audio and video formats. A buffer overflow vulnerability exists in FFmpeg where the size calculation in buildopengopkeypoints iterates over all entries in the loo...

FFmpeg libavutil float_dsp Heap Buffer Overflow DoS

The vulnerability of the avprivfloatdspallocl function in the libavutil/floatdsp.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause service failure...