DSA-5124-1 ffmpeg - security update

Bulletin has no description...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability previously existed in Google Chrome version 108.0.5359.71, which originated from an uninitialized use vulnerability in FFmpeg...

libavutil mem Heap Buffer Overflow DoS

The vulnerability of the avfreep function in the libavutil/mem.c component of the FFmpeg multimedia library relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

libavfilter/vf_gblur Heap Buffer Overflow DoS

The vulnerability of the configinput function in the libavfilter/vfgblur.c file of the FFmpeg multimedia library involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

libavfilter/vf_convolution.c Heap Buffer Overflow DoS

The vulnerability of the filter16prewitt function in the libavfilter/vfconvolution.c component of the FFmpeg multimedia library is related to integer overflow. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Exploit for SQL Injection in Zabbix

This repository is an offensive tool for vulnerability research and exploitation. It contains a collection of vulnerable environments and exploits for various software and frameworks, including CouchDB, FFmpeg, Git, and Oracle Java. The repository is maintained by phith0n and is hosted on GitHub...

FFmpeg latmenc Component Buffer Overflow DoS

The vulnerability of the latmwritepacket function in the libavformat/latmenc.c component of the FFmpeg multimedia library is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

libavformat/mpegenc.c Heap Buffer Overflow DoS

The vulnerability of the mpegmuxwritepacket function in the libavformat/mpegenc.c component of the FFmpeg multimedia library relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a specially created AVI file...

ffmpeg:ffmpeg_AV_CODEC_ID_VP3_fuzzer: Crash in ff_emu_edge_vfix12_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4801592127258624 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVP3fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000105670d17...

FFmpeg filter_frame Heap Buffer Overflow DoS

The vulnerability of the filterframe function in the libavfilter/vflenscorrection.c file of the FFmpeg multimedia library is related to the lack of checks for division by zero. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and caus...

ffmpeg:ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer: Index-out-of-bounds in decode_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5354894996930560 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDWMALOSSLESSfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_WMALOSSLESS_fuzzer: Stack-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5802928738271232 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDWMALOSSLESSfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_THEORA_fuzzer: Crash in ff_put_pixels8_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6751648258588672 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTHEORAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001044f27f...

ffmpeg:ffmpeg_dem_IMF_fuzzer: Invalid-free in xmlFreeNodeList

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5190228531347456 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6190000000dd Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_DFPWM_fuzzer: Heap-buffer-overflow in dfpwm_dec_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4520058007715840 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDFPWMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

ffmpeg:ffmpeg_BSF_VP9_SUPERFRAME_fuzzer: Heap-buffer-overflow in vp9_superframe_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5173378975137792 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFVP9SUPERFRAMEfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_dem_IMF_fuzzer: Invalid-free in xmlFreeProp

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5760819097370624 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemIMFfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Invalid-free Crash Address: 0x6190000000e7 Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_ALS_fuzzer: Heap-buffer-overflow in av_freep

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4874997192065024 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDALSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_ALS_fuzzer: Heap-buffer-overflow in decode_init

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6473487382872064 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDALSfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_DFPWM_fuzzer: Heap-buffer-overflow in au_decompress

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4947856883056640 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDDFPWMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...