7 matches found
CVE-2026-125199
FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...
CVE-2026-125199
FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...
EUVD-2026-120288
FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...
CVE-2026-125199: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1_decode_frame() in libavcodec/vc1dec.c that leaks slice…
FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...
SUSE CVE-2018-13303
In FFmpeg 4.0.1, a missing check for failure of a call to initgetbits8 in the avprivac3parseheader function in libavcodec/ac3parser.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...
Null pointer dereference
In FFmpeg 4.0.1, a missing check for failure of a call to initgetbits8 in the avprivac3parseheader function in libavcodec/ac3parser.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...
CVE-2018-13303: NULL Pointer Dereference
In FFmpeg 4.0.1, a missing check for failure of a call to initgetbits8 in the avprivac3parseheader function in libavcodec/ac3parser.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...