CVE-2016-7477: NULL Pointer Dereference

The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...

CVE-2016-6832: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

PT-2017-9725

Name of the Vulnerable Software and Affected Versions Libav version 11.9 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and crash, via a crafted mp3 file. This problem exists due to an incomplete fix for a previous issue...

PT-2017-9724

Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.9 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This can be achieved by providing a crafted mp3 file, possibly related to startcod...

CVE-2016-10192

Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size...

PT-2018-5227

Name of the Vulnerable Software and Affected Versions libav version 13 dev0 ffmpeg version n3.4 chromium versions prior to 56 before Feb 13, 2017 Description The issue arises from the return value of init get bits being ignored, leading to get ue golomb&gb being called on an uninitialized get bit...

Debian DLA-791-1 : libav security update

Multiple integer overflows have been discovered in libav 11.8 and earlier, allowing remote attackers to cause a crash via a crafted MP3 file. For Debian 7 'Wheezy', these problems have been fixed in version 6:0.8.20-0+deb7u1. We recommend that you upgrade your libav packages. NOTE: Tenable Networ...

[SECURITY] [DLA 791-1] libav security update

Package : libav Version : 6:0.8.20-0+deb7u1 CVE ID : CVE-2016-9819 CVE-2016-9820 CVE-2016-9821 CVE-2016-9822 Multiple integer overflows have been discovered in libav 11.8 and earlier, allowing remote attackers to cause a crash via a crafted MP3 file. For Debian 7 "Wheezy", these problems have bee...

DLA-791-1 libav - security update

Bulletin has no description...

Debian DLA-780-1 : libav security update

Multiple vulnerabilities have been found in libav : CVE-2016-7424 The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted MP3 file. No CVE assigned The h264 codec is...

[SECURITY] [DLA 780-1] libav security update

Package : libav Version : 6:0.8.19-0+deb7u1 CVE ID : CVE-2016-7424 Multiple vulnerabilities have been found in libav: CVE-2016-7424 The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and...

DLA-780-1 libav - security update

Bulletin has no description...

Libav Denial of Service Vulnerability (CNVD-2016-12208)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12213)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12214)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12211)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12209)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12210)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12212)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12215)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...