CVE-2019-13390: Divide By Zero

In FFmpeg 4.1.3, there is a division by zero at adxwritetrailer in libavformat/rawenc.c...

CVE-2019-13312

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

CVE-2019-13312

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

CVE-2019-13312

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

CVE-2019-13312

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

CVE-2019-13312

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

CVE-2019-13312

CVE-2019-13312 affects FFmpeg 4.1.3, where block_cmp() in libavcodec/zmbvenc.c can trigger a heap-based buffer over-read. This is evidenced across multiple advisories (ALT Linux fix 4.2.3-alt1 and Gentoo GLSA 202003-65 recommending upgrading to FFmpeg 4.2.x or newer). Impact per sources is partia...

CVE-2019-13312

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

CVE-2019-13312

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

PT-2019-13248

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.1.3 Description The issue is related to a heap-based buffer over-read in the block cmp function, located in libavcodec/zmbvenc.c. Recommendations For FFmpeg version 4.1.3, update to a newer version that contains a fix for this...

CVE-2019-13312: Out-of-bounds Read

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

ffmpeg/ffmpeg_AV_CODEC_ID_ATRAC9_fuzzer: Index-out-of-bounds in parse_gradient

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5738260074070016 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDATRAC9fuzzer Fuzz target binary: ffmpegAVCODECIDATRAC9fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type:...

ffmpeg/ffmpeg_AV_CODEC_ID_VORBIS_fuzzer: Crash in vorbis_floor0_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5729191309344768 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDVORBISfuzzer Fuzz target binary: ffmpegAVCODECIDVORBISfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ...

PT-2019-6256

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description The issue is related to a Divide By Zero problem in the libavcodec/lpc.h component of the FFmpeg multimedia library. This allows a remote attacker to cause a Denial of Service. Recommendations For FFmpeg version...

PT-2019-6456

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.1.3 Description The issue is related to a lack of division by zero check in the libavcodec/ratecontrol.c component of the FFmpeg multimedia library. This can be exploited by a remote attacker to cause a Denial of Service...

PT-2019-6401

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description The issue is related to a Divide By Zero problem in the libavcodec/aacpsy.c component of the FFmpeg library. This allows a remote malicious user to cause a Denial of Service. The vulnerability is exploited throug...

ffmpeg/ffmpeg_AV_CODEC_ID_FLIC_fuzzer: Heap-buffer-overflow in flic_decode_frame_24BPP

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5717995202019328 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDFLICfuzzer Fuzz target binary: ffmpegAVCODECIDFLICfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Cra...

ffmpeg/ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in read_sb_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5658343542095872 Project: ffmpeg Fuzzer: libFuzzerffmpegDEMUXERfuzzer Fuzz target binary: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Cra...

ffmpeg/ffmpeg_AV_CODEC_ID_HYMT_fuzzer: Crash in decode_slice

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5710295743332352 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHYMTfuzzer Fuzz target binary: ffmpegAVCODECIDHYMTfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_DXV_fuzzer: Heap-buffer-overflow in dxt1_block_internal

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5670831067234304 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDDXVfuzzer Fuzz target binary: ffmpegAVCODECIDDXVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...