1357 matches found
Libav buffer error vulnerability
Libav is an open source audio and video processing tool that provides cross-platform tools and libraries for converting, manipulating, and streaming various multimedia formats and protocols. vc1decodepmbintfi in vc1block.c in Libav version 12.3 is vulnerable to a heap buffer overflow. An attacker...
Libav buffer error vulnerability
Libav is an open source audio and video processing tool that provides cross-platform tools and libraries for converting, manipulating, and streaming various multimedia formats and protocols. vc1decodebmbintfr in vc1block.c in Libav version 12.3 is vulnerable to a segmentation error. An attacker...
CVE-2020-18778: Out-of-bounds Read
In Libav 12.3, there is a heap-based buffer over-read in vc1decodepmbintfi in vc1block.c that allows an attacker to cause denial-of-service via a crafted file...
PT-2021-10242 · Libav · Libav
Name of the Vulnerable Software and Affected Versions: Libav version 12.3 Description: The issue is a heap-based buffer over-read in the vc1 decode b mb intfi function in vc1 block.c, which can be exploited by an attacker to cause a denial-of-service via a crafted file. Recommendations: For Libav...
Libav buffer error vulnerability
Libav is an open source audio and video processing tool that provides cross-platform tools and libraries for converting, manipulating, and streaming various multimedia formats and protocols. vc1decodebmbintfi in vc1block.c in Libav version 12.3 is vulnerable to a heap buffer overflow. An attacker...
PT-2021-10244 · Libav · Libav
Name of the Vulnerable Software and Affected Versions: Libav version 12.3 Description: The issue is a heap-based buffer over-read in the vc1 decode p mb intfi function in vc1 block.c, which can be exploited by an attacker to cause a denial-of-service via a crafted file. Recommendations: For Libav...
CVE-2020-18775: Out-of-bounds Read
In Libav 12.3, there is a heap-based buffer over-read in vc1decodebmbintfi in vc1block.c that allows an attacker to cause denial-of-service via a crafted file...
PT-2020-22249
Name of the Vulnerable Software and Affected Versions Libav versions affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the av1 convolve 2d copy sr sse2 function, which is called by av1 convolve 2d facade and av1 make inter...
Integer overflow
Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...
CVE-2014-4609
Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...
CVE-2014-4609
Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...
CVE-2014-4609
Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...
CVE-2014-4609: Integer Overflow or Wraparound
Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...
PT-2020-7678
Name of the Vulnerable Software and Affected Versions Libav versions prior to 0.8.13 Libav versions 9.x prior to 9.14 Libav versions 10.x prior to 10.2 Description The issue is related to an integer overflow in the get len function in libavutil/lzo.c, which allows remote attackers to execute...
Debian: Security Advisory (DLA-2021-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2021-1 : libav security update
Several security issues were fixed in libav, a multimedia library for processing audio and video files. CVE-2017-17127 The vc1decodeframe function in libavcodec/vc1dec.c allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...
[SECURITY] [DLA 2021-1] libav security update
Package : libav Version : 6:11.12-1deb8u9 CVE ID : CVE-2017-17127 CVE-2017-18245 CVE-2018-19128 CVE-2018-19130 CVE-2019-14443 CVE-2019-17542 Several security issues were fixed in libav, a multimedia library for processing audio and video files. CVE-2017-17127 The vc1decodeframe function in...
DLA-2021-1 libav - security update
Bulletin has no description...
CVE-2019-9717
In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c has a complex format argument to sscanf...
CVE-2019-9719
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srttoass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a...