10990 matches found
FFmpeg security vulnerabilities
FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg Ffmpeg team. A security vulnerability exists in FFmpeg, which originates from an assertion failure at src/libavutil/mathematics.c. The vulnerability is caused by the use of the following code:...
CVE-2021-38291
FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 suffers from a an assertion failure at src/libavutil/mathematics.c...
FFmpeg heap reuse vulnerability after release
FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video, and convert them to streams under the LGPL or GPL license. mpegmuxwritepacket function in libavformat/mpegenc.c in FFmpeg version 4.2 suffers from a heap-release post-reuse vulnerability...
FFmpeg heap reuse after release vulnerability (CNVD-2021-79768)
FFmpeg is a set of open source computer programs that can be used to record, convert, and stream digital audio and video under the LGPL or GPL license. avfreep function in libavutil/mem.c in FFmpeg version 4.2 is vulnerable to a heap-release post-reuse vulnerability. An attacker can exploit this...
DEBIAN-CVE-2020-21697
A heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service DOS via a crafted avi file...
CVE-2020-21697
A heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service DOS via a crafted avi file...
CVE-2020-21688
A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...
DEBIAN-CVE-2020-21688
A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...
CVE-2020-21688
A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...
CVE-2020-21690
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-20451. Reason: This candidate is a duplicate of CVE-2020-20451. Notes: All CVE users should reference CVE-2020-20451 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
UBUNTU-CVE-2020-21688
A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...
Heap overflow
A heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service DOS via a crafted avi file...
Heap overflow
A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...
CVE-2020-21688
A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...
CVE-2020-21688
A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...
CVE-2020-21688
A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...
CVE-2020-21688
CVE-2020-21688 describes a heap-use-after-free in FFmpeg’s libavutil/mem.c av_freep, affecting FFmpeg 4.2 and enabling arbitrary code execution under plausible conditions. Public references in connected documents indicate the issue pertains to FFmpeg 4.2, with surrounding advisories noting the vu...
CVE-2020-21697
The CVE-2020-21697 entry concerns FFmpeg 4.2 with a heap-use-after-free in libavformat/mpegenc.c (mpeg_mux_write_packet) that allows denial of service via a crafted AVI file. Connected advisories confirm the issue in FFmpeg 4.2 and reference mitigations/upgrades (e.g., Ubuntu USN entries and Debi...