FFmpeg Handle Eac3 Code Execution

The vulnerability of the handleeac3 function “libavformat/movenc.c” in the FFmpeg multimedia processing framework is related to incorrect handling of frame types all types except EAC3FRAMETYPEINDEPENDENT. These types involve multiple independent streams, which can allow access beyond the permitte...

FFmpeg 'handle_eac3' function out-of-bounds read vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'handleeac3' function in the libavformat/movenc.c file in FFmpeg version 4.0.1, which originated from incorrect parameters AVCodecParameters being...

PT-2018-11727

Name of the Vulnerable Software and Affected Versions FFmpeg versions 3.2 and 4.0.1 Description The issue arises from an improper argument AVCodecParameters passed to the avpriv request sample function in the handle eac3 function, potentially triggering an out-of-array read when converting a...

PT-2018-2293

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.0.1 Description The issue is related to the improper handling of frame types, other than EAC3 FRAME TYPE INDEPENDENT, that have multiple independent substreams in the handle eac3 function. This may trigger an...