CVE-2016-7555

The avireadheader function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure...

ALPINE-CVE-2016-7450

The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...

CVE-2016-8595

The gsmparse function in libavcodec/gsmparser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

CVE-2016-7905

The readgab2sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service NULL pointer used via a crafted AVI file...

ALPINE-CVE-2016-7785

The avireadseek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

UBUNTU-CVE-2016-7450

The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...

DEBIAN-CVE-2016-8595

The gsmparse function in libavcodec/gsmparser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

CVE-2016-6881

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

CVE-2016-7502

The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...

CVE-2016-6881

This CVE refers to FFmpeg before 3.1.3, where the zlib_refill function in libavformat/swfdec.c can trigger an infinite loop DoS via a crafted SWF file. Affected software is FFmpeg; the root cause is an issue in zlib_refill handling within SWF decoding. Documented impact is denial of service with ...

CVE-2016-6671

The rawdecode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted SWF file...

CVE-2016-7785

Vulnerability summary (CVE-2016-7785): FFmpeg’s avi_read_seek in libavformat/avidec.c is vulnerable to crafted AVI files, causing a denial of service via an assertion fault. Affected: FFmpeg versions prior to 3.1.4. Impact described in multiple advisories and CVE records; exploit details focus on...

CVE-2016-7555

The CVE concerns FFmpeg before 3.1.4, specifically the avi_read_header function in libavformat/avidec.c, which leaks memory when decoding an AVI file with a crafted "strh" structure. Affected component: FFmpeg's demux/AVI parser. Root cause: memory leak in avi_read_header when parsing a manipulat...

CVE-2016-7905

FFmpeg vulnerability CVE-2016-7905 affects the read_gab2_sub function in libavformat/avidec.c, where a crafted AVI file can trigger a NULL pointer dereference leading to a denial of service. Affected versions are FFmpeg before 3.1.4. The issue has been reported across multiple advisories (NVD ent...

CVE-2016-6671

Illustrative vulnerability summary : CVE-2016-6671 affects FFmpeg’s libavcodec/rawdec.c, where the raw_decode function in FFmpeg before 3.1.2 can be exploited by a crafted SWF file to cause memory corruption, leading to denial of service or arbitrary code execution. Affected component: libavcodec...

CVE-2016-7502

CVE-2016-7502 affects FFmpeg prior to 3.1.4. The vulnerability lies in the function cavs_idct8_add_c (libavcodec/cavsdsp.c), which can read out-of-bounds memory when decoding with cavs_decode. This could impact systems processing certain cavs-video streams, with potential effects on confidentiali...

CVE-2016-7122

The avireadnikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure...

CVE-2016-7122

The CVE-2016-7122 entry concerns FFmpeg. The vulnerability is in the function avi_read_nikon of libavformat/avidec.c, affecting FFmpeg before 3.1.4, and is triggered when decoding an AVI file containing a crafted 'nctg' structure, leading to an infinite loop. Several connected sources (NVD, CNVD,...

CVE-2016-9561

The checonfigure function in libavcodec/aacdectemplate.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service allocation of huge memory, and being killed by the OS via a crafted MOV file...

CVE-2016-7785

The avireadseek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...