CVE-2013-0862

CVE-2013-0862 affects FFmpeg (libavcodec/sanm.c: process_frame_obj). The vulnerability is due to multiple integer overflows that can cause an out-of-bounds access when processing LucasArts Smush image data, leading to potential arbitrary impact on confidentiality, integrity, and availability. Aff...

CVE-2013-0863

CVE-2013-0863 : FFmpeg contains a buffer overflow in the rle_decode function (libavcodec/sanm.c) that affects FFmpeg releases before 1.0.4 and 1.1.x before 1.1.2 when processing crafted LucasArts Smush video data. The vulnerability could allow a remote attacker to cause arbitrary code execution o...

CVE-2013-0866

CVE-2013-0866 affects FFmpeg’s libavcodec/aacdec.c (aac_decode_init). The vulnerability arises when parsing AAC files with a very large number of channels, leading to an out-of-bounds array access. Affected versions are FFmpeg before 1.0.4 and 1.1.x before 1.1.2. Impact is remote via crafted AAC ...

CVE-2013-0861

The avcodecdecodeaudio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 allows remote attackers to trigger memory corruption via vectors related to the channel layout...

CVE-2013-0860

The fferframeend function in libavcodec/errorresilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to trigger a NULL pointer dereference via crafted picture data...

CVE-2013-0867

FFmpeg vulnerability CVE-2013-0867: the decode_slice_header function in libavcodec/h264.c before 1.1.2 does not properly validate when the pixel format changes, allowing a remote attacker to trigger an unspecified impact via crafted H.264 video data, related to an out-of-bounds array access. Affe...

CVE-2013-0862

Multiple integer overflows in the processframeobj function in libavcodec/sanm.c in FFmpeg before 1.1.2 allow remote attackers to have an unspecified impact via crafted image dimensions in LucasArts Smush video data, which triggers an out-of-bounds array access...

CVE-2013-0869

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

CVE-2013-0868

libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and 1 unchecked return codes from the initvlc function and 2 "len==0 cases."...

CVE-2013-0864

CVE-2013-0864 affects FFmpeg prior to 1.1.2. The vulnerability is in libavcodec/gifdec.c:gif_copy_img_rect, where an incorrect calculation for the end pointer enables remote attackers to trigger an out-of-bounds array access via crafted GIF data, with unspecified impact. The issue is mitigated by...

CVE-2013-0860

The CVE-2013-0860 vulnerability affects FFmpeg (libavcodec) where ff_er_frame_end in error_resilience.c can fail to verify frame initialization, allowing a remote attacker to trigger a NULL pointer dereference via crafted picture data. Public details indicate the issue exists in FFmpeg before 1.0...

CVE-2013-0861

The CVE-2013-0861 vulnerability affects FFmpeg’s avcodec_decode_audio4 function (libavcodec/utils.c) and allows remote triggers of memory corruption through channel layout vectors. Affected versions are FFmpeg before 1.0.4 and 1.1.x before 1.1.1. Documents consistently describe this as a remote-c...

CVE-2013-0865

The vqadecodechunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large 1 cbp0 or 2 cbpz chunk in Westwood Studios VQA Video file, which triggers an out-of-bounds write...

CVE-2013-0869

FFmpeg before 1.1.2 is vulnerable to a denial-of-service via field_end() in libavcodec/h264.c when processing crafted H.264 data (SPS/slice mismatch and out-of-bounds access). A patch was released with FFmpeg 1.1.2 and later versions to fix the issue; upgrade to 1.1.2+ or apply the vendor patch. ...

CVE-2013-0865

CVE-2013-0865 affects FFmpeg/libav: the vqa_decode_chunk function in libavcodec/vqavideo.c allows an out-of-bounds write through large cbp0 or cbpz chunks in Westwood VQA video files. The issue is fixed in FFmpeg releases >= 1.0.4 and >= 1.1.2. Remediation is to upgrade FFmpeg/libav to a ve...

CVE-2013-0863

Buffer overflow in the rledecode function in libavcodec/sanm.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via crafted LucasArts Smush video data...

CVE-2013-0866

The aacdecodeinit function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large number of channels in an AAC file, which triggers an out-of-bounds array access...

CVE-2013-0868

A connected AstraLinux advisory notes that FFmpeg 4.4 contains a similar issue to CVE-2013-0868: libavcodec/dnxhddec.c does not check the return value of init_vlc, i.e., a missing validation of VLC initialization in dnxhddec.c. This directly mirrors the pattern described for CVE-2013-0868 (out-of...

CVE-2013-0867

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access...

CVE-2013-0861

The avcodecdecodeaudio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 allows remote attackers to trigger memory corruption via vectors related to the channel layout...