CVE-2017-9995

libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-9991

Heap-based buffer overflow in the xwddecodeframe function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other...

FFmpeg 'color_string_to_rgba' function stack buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A stack buffer overflow vulnerability exists in the 'colorstringtorgba' function in the libavcodec/xpmdec.c file in FFmpeg. A remote attacker can exploit this vulnerability to cause a denia...

FFmpeg 'xwd_decode_frame' function heap buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A heap buffer overflow vulnerability exists in the 'xwddecodeframe' function in the libavcodec/xwddec.c file in FFmpeg. A remote attacker can exploit this vulnerability to cause a denial of...

FFmpeg 'libavcodec/scpr.c' 'Heap Buffer Overflow Vulnerability'

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/scpr.c file in FFmpeg. A remote attacker could exploit this vulnerability to cause a denial of service heap buffer overflow and application...

Ffmpeg Arbitrary File Read Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg because the program fails to properly restrict HTTP Live Streaming filename extensions and demuxer names. The vulnerability can be exploited to rea...

FFmpeg 'decode_dds1' function heap buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A heap buffer overflow vulnerability exists in the 'decodedds1' function in the libavcodec/dfa.c file in FFmpeg. A remote attacker could exploit this vulnerability to cause a denial of...

FFmpeg arbitrary file read vulnerability analysis-vulnerability warning-the black bar safety net

Vulnerability analysis The vulnerability was originally developed by neex submitted to the HackerOne platform, and eventually get a 1000$bonus, the original link is https://hackerone.com/reports/226756 the. According to the authors, the exploitability of the vulnerability in the FFmpeg can handle...

FFmpeg 'libavcodec/webp.c' heap buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/webp.c file in FFmpeg, which arises from the program failing to ensure that pixfmt is set. A remote attacker could use this vulnerability t...

Vulnerability warning | FFmpeg aeration arbitrary file read vulnerability-vulnerability warning-the black bar safety net

Recently a white hat in the HackerOne platform reported by ffmpeg vulnerability using ffmpeg HLS playlist processing way, can lead to local file exposure. Vulnerability description 6 on 24 May, the HackerOne platform named neex the white hat for the Russian social networking site VK. com reported...

arxius: another local file disclosure via ffmpeg

Summary The fix for https://hackerone.com/reports/242831 can be easily bypassed. It looks like you've banned file:// substring, which is not enough. Repro steps 1. Download genavi.py attached and run the script like this: python3 genavi.py /etc/passwd mustsandboxffmpeg.avi.mp4. 2. Visit...

arxius: Local File Disclosure via ffmpeg

Summary ffmpeg is a video and audio software that is used for generating previews and for converting videos. Your current installation allows HLS playlists that contain references to external files, which leads to local file disclosure. Reproduction 1. Download this script...

ffmpeg: Crash in ff_vp9_ipred_dr_16x16_16_avx2

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5165385038954496 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDVP9fuzzer Fuzz target binary: ffmpegAVCODECIDVP9fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

ffmpeg: Heap-buffer-overflow in qmfSynPrototypeFirSlot

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4930971562409984 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

OPENSUSE-SU-2017:1531-1 Security update for ffmpeg

This update of ffmpeg to version 3.1.8 fixes the following security issues: - CVE-2016-9561: DoS through huge memory allocation bsc1015120 - CVE-2016-10191: remote code execution vulnerability bsc1022921 - CVE-2016-10192: remote code execution vulnerability bsc1022922 - CVE-2017-5024: Heap overfl...

OPENSUSE-SU-2017:1532-1 Security update for ffmpeg

ffmpeg was updated to fix the following security issues: CVE-2016-10191: remote exploitaion results code execution bsc1022921 CVE-2016-10192: remote exploitaion results code execution bsc1022922 CVE-2017-7866: stack-based buffer overflow bsc1034176 CVE-2017-7865: heap-based buffer overflow...

ffmpeg: Index-out-of-bounds in add_candidate_ref

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5012343912136704 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHEVCfuzzer Fuzz target binary: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

ffmpeg: Heap-buffer-overflow in filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5688641642823680 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDCFHDfuzzer Fuzz target binary: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow...

ffmpeg: Index-out-of-bounds in ff_h264_pred_weight_table

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5267945972301824 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDH264fuzzer Fuzz target binary: ffmpegAVCODECIDH264fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

Google Chrome FFmpeg Memory Misreference Vulnerability

Google Chrome is a web browser developed by Google.FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A memory misreference vulnerability exists in the libavformat/mov.c file of FFmpeg in Google Chrome version 41.0.2251.0. A remote attacker...