Automattic: SSRF and local file disclosure in https://wordpress.com/media/videos/ via FFmpeg HLS processing

Summary FFmpeg is a video encoding software that appears to be used by wordpress.com for video processing for paid accounts. FFmpeg is known to process HLS playlists that may contain references to external files. I was able to fire this feature using GAB2 subtitle chunks inside an AVI file. After...

CVE-2015-1207

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...

CVE-2015-1207

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...

CVE-2015-1207

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...

UBUNTU-CVE-2015-1207

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...

CVE-2015-1207

CVE-2015-1207 is a double-free vulnerability in libavformat/mov.c of FFmpeg affecting Google Chrome 41.0.2251.0, exploitable via a crafted .m4a file to cause memory corruption and a denial of service. Publicly documented in OSV and Debian advisories, with Debian noting fixes in libav 6:11.12-1~de...

CVE-2015-1207

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...

ffmpeg: Crash in ff_put_pixels8_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5036861833609216 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMXPEGfuzzer Fuzz target binary: ffmpegAVCODECIDMXPEGfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash...

ffmpeg: Index-out-of-bounds in ff_hevc_decode_short_term_rps

Detailed report: https://oss-fuzz.com/testcase?key=6209288450080768 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHEVCfuzzer Fuzz target binary: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

ffmpeg: Stack-buffer-overflow in FDKmemset

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6319232084082688 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

ffmpeg: Global-buffer-overflow in svq3_decode_mb

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6645980176842752 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDSVQ3fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x0000008b6a99 Crash...

ffmpeg: Stack-buffer-overflow in put_bilin_2d_hv_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6266250911023104 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDVP9fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 2 Crash Address: 0x7f33441d38a0 Crash...

ffmpeg: Global-buffer-overflow in stereo_processing

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4957953339686912 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDAACFIXEDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000018bb420...

ffmpeg: Stack-use-after-return in put_h264_qpel8_hv_lowpass_9

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4870171724349440 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDH264fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-use-after-return READ 2 Crash Address: 0x7f3acd5b01a0 Crash...

ffmpeg: Stack-use-after-return in put_h264_qpel8_hv_lowpass_9

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4719816059387904 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDH264fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-use-after-return READ 2 Crash Address: 0x7fd5f505c0e0 Crash...

ffmpeg: Crash in ff_vp9_put32_avx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5544941956628480 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDVP9fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x632000020040 Crash State:...

ffmpeg: Global-buffer-overflow in avpriv_mpegaudio_decode_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4659523174268928 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDMP1fuzzer Fuzz target binary: ffmpegAVCODECIDMP1fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Cras...

ffmpeg: Crash in FDKreadBits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5021082513833984 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash...

ffmpeg: Index-out-of-bounds in output_data

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6574546079449088 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMLPfuzzer Fuzz target binary: ffmpegAVCODECIDMLPfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds...

ffmpeg: Global-buffer-overflow in decode_hq_slice

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4617176877105152 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDDIRACfuzzer Fuzz target binary: ffmpegAVCODECIDDIRACfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 4...