Denial Of Service (DoS) From Out-of-bounds Heap Access

FFMpeg is vulnerable to denial of service DoS attacks and other attacks. These attacks are possible because the rawdecode function allows remote attackers to cause an out-of-bounds heap access. The attacks can be performed through a .cine file that triggers the avpicturegetsize to return a negati...

Denial Of Service (DoS)

FFMpeg is vulnerable to denial of service DoS attacks. These attacks are possible through the ffhevcdecodenalsps function which allows remote attackers to cause out-of-bounds access through a .bit file...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because it doesn't ensure that pre-established digits and word array dimensions satisfy a required mathematical relationship. This flaw allows attacks to use X-Face image data to cause out-of-bounds array access and...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are caused by the vmddecode function not validating the relationship between the length value and the frame width. These attacks can be caused through Sierra VMD video data...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. These attacks are possible because FFmpeg does not check for a zero value of a slice height in utvideodec.c. This leads to an out-of-bounds array access through Ut Video data...

Integer Overflow

FFmpeg is vulnerable to integer overflow. A malicious user can pass a malicious mov file containing a presentation timestamp value to cause an integer overflow in the system that can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious .avi file to the system, causing an out of bounds array access that can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious .cine file to the system, causing a out-of-bounds array read which can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious TIFF file to the system, causing an out-of-bounds read that can crash the system...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. The library does not properly calculate the buffer size, allowing a malicious user to pass a malicious tga file to cause an out-of-bounds array access that can lead to the system crashing...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious AVI file to the system to cause a buffer overflow error which can cause the system to crash...

Denial Of Service (DoS)

FFmpeg is vulnerable to a denial of service DoS attacks. A malicious user can pass a malicious AVI file that can cause assert fault error that can lead to the application crashing...

Denial Of Service (DoS)

FFMpeg is vulnerable to a denial of service DoS attack. A malicious user can pass a malicious AVI file to the system, causing a null pointer error that can crash the application...

Denial Of Service (DoS)

FFMpeg is vulnerable to denial of service DoS attacks. A malicious user can pass the system a malicious AVI file which can lead to an assert fault that can crash the system...

Denial Of Service (DoS)

FFMpeg is vulnerable to a denial of service DoS attacks. A malicious user can pass a malicious .mov file to the system, causing a denial of service via the consumption of memory...

ffmpeg: Stack-buffer-overflow in synth_tones

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5737865715646464 Project: ffmpeg Fuzzer: ffmpegAUDIOAVCODECIDDTSfuzzer Job Type: libfuzzerasanffmpeg Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7f440e0a0a20 Crash State...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the Ffmpeg component in the Google Chrome browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially created video file...

Debian DSA-3776-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2017-5006 Mariusz Mlynski discovered a cross-site scripting issue. - CVE-2017-5007 Mariusz Mlynski discovered another cross-site scripting issue. - CVE-2017-5008 Mariusz Mlynski discovered a third cross-site scripting...

GLSA-201701-71 : FFmpeg: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-71 FFmpeg: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could cause a Denial of Service conditio...

FFmpeg: Multiple vulnerabilities

Background FFmpeg is a complete, cross-platform solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact Remote attackers could cause a Denial of Service...