ffmpeg:ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Heap-buffer-overflow in idctSparseColPut_int32_10bit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4627865612189696 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDMPEG4fuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HAP_fuzzer: Crash in bytestream2_get_levarint

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5762798221131776 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHAPfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618fff001508...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5714366794170368 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_CFHD_fuzzer: Heap-buffer-overflow in interlaced_vertical_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5011292836462592 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDCFHDfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HAP_fuzzer: Crash in ff_snappy_peek_uncompressed_length

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5287506176245760 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHAPfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x618fff001508...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Heap-buffer-overflow in ff_parse_itu_t_t35_to_dynamic_hdr10_plus

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4799677348315136 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_MSP2_fuzzer: Heap-buffer-overflow in msp2_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5485531783888896 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMSP2fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_PBM_fuzzer: Heap-buffer-overflow in ff_combine_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4997145650397184 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDPBMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6110000002bb...

Debian: Security Advisory (DLA-2537-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2537-1] ffmpeg security update

Debian LTS Advisory DLA-2537-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez January 31, 2021 https://wiki.debian.org/LTS Package : ffmpeg Version : 7:3.2.15-0+deb9u2 CVE ID : CVE-2019-17539 CVE-2020-35965 Debian Bug : 979999 Two vulnerabilities have been...

DLA-2537-1 ffmpeg - security update

Bulletin has no description...

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments, referred to as 'Vulhub'. It is an offensive tool for web application security testing and vulnerability research. The primary vulnerability targeted by this repository is not explicitly stated, but it contai...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection. The injection point is located in line 9 in index.js. PoC var root = require"ffmpeg-sdk"; root.execute"touch JHU"; Remediation There is no fixed version for ffmpeg-sdk. Credit: JHU System Security Lab...

ffmpeg:ffmpeg_dem_CINE_fuzzer: Heap-buffer-overflow in cine_read_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5692001957445632 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemCINEfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x618000000bf8 Cras...

ffmpeg:ffmpeg_BSF_AV1_METADATA_fuzzer: Stack-use-after-return in cbs_av1_write_obu

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5931515701755904 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFAV1METADATAfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Stack-use-after-return WRITE 1 Crash Addres...

ffmpeg:ffmpeg_AV_CODEC_ID_FFV1_fuzzer: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4808377272238080 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDFFV1fuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Out-of-Bounds Access

ffmpeg is vulnerable to out-of-bounds write because of errors in calculations of when to perform memset zero operations...

vulhub

It is an offensive tool for Docker environments. The primary CVE ID is not explicitly mentioned, but the tool targets various vulnerable Docker environments, including CouchDB, FFmpeg, Git, InfluxDB, and Oracle Java. The tool is designed to test and demonstrate vulnerabilities in these...

vulhub

It is an offensive tool for Docker environments. The repository contains a collection of vulnerable Docker environments, including CouchDB, ffmpeg, git, and influxdb, among others. The environments are designed to be used for testing and training purposes, allowing users to practice exploiting...

ffmpeg:ffmpeg_dem_AAC_fuzzer: Heap-buffer-overflow in read_apic

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5096222622875648 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...