CVE-2017-17130: Improper Restriction of Operations within the Bounds of a Memory Buffer

The fffreepicturetables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to vc1decodeiblocksadv...

CVE-2017-17129: NULL Pointer Dereference

The ffvc1mc4mvchroma4 function in libavcodec/vc1mc.c in Libav 12.2 allows remote attackers to cause a denial of service segmentation fault and application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-17128: Improper Restriction of Operations within the Bounds of a Memory Buffer

The h264sliceinit function in libavcodec/h264slice.c in Libav 12.2 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted file...

CVE-2017-17127: NULL Pointer Dereference

The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

PT-2017-14721

Name of the Vulnerable Software and Affected Versions Libav version 12.2 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted file. This is due to a problem in the vc1 decode frame function in...

PT-2017-14723

Name of the Vulnerable Software and Affected Versions Libav version 12.2 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and application crash, or possibly have other unspecified impacts via a crafted file. This is due to a problem in...

PT-2017-14724

Name of the Vulnerable Software and Affected Versions Libav version 12.2 Description The issue allows remote attackers to cause a denial of service, which may result in a heap-based buffer overflow and application crash, or possibly have other unspecified impacts. This is achieved through a craft...

PT-2017-14722

Name of the Vulnerable Software and Affected Versions Libav version 12.2 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and application crash, via a crafted file. This is due to a problem in the h264 slice init function. Recommendatio...

libav denial of service vulnerability (CNVD-2017-36545)

Libav formerly FFmpeg is Libav team's set of cross-platform audio and video can be recorded, converted to a solution, which includes a libavcodec encoder. A security vulnerability exists in the 'smackerdecodetree' function of the libavcodec/smacker.c file in Libav versions 11.11 and earlier, and...

CVE-2017-16803

In Libav through 11.11 and 12.x through 12.1, the smackerdecodetree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service bitstream.c:buildtable out-of-bounds read and application crash via a crafted Smacker stream...

Out-of-bounds

In Libav through 11.11 and 12.x through 12.1, the smackerdecodetree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service bitstream.c:buildtable out-of-bounds read and application crash via a crafted Smacker stream...

CVE-2017-16803

In Libav through 11.11 and 12.x through 12.1, the smackerdecodetree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service bitstream.c:buildtable out-of-bounds read and application crash via a crafted Smacker stream...

CVE-2017-16803

In Libav through 11.11 and 12.x through 12.1, the smackerdecodetree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service bitstream.c:buildtable out-of-bounds read and application crash via a crafted Smacker stream...

DEBIAN-CVE-2017-16803

In Libav through 11.11 and 12.x through 12.1, the smackerdecodetree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service bitstream.c:buildtable out-of-bounds read and application crash via a crafted Smacker stream...

CVE-2017-16803

In Libav through 11.11 and 12.x through 12.1, the smackerdecodetree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service bitstream.c:buildtable out-of-bounds read and application crash via a crafted Smacker stream...

CVE-2017-16803

CVE-2017-16803 affects Libav up to 11.11 and 12.x up to 12.1; the smacker_decode_tree function does not properly restrict tree recursion, allowing a remote attacker to trigger a denial of service via a crafted Smacker stream, causing an out-of-bounds read in bitstream.c:build_table() and an appli...

CVE-2017-16803

In Libav through 11.11 and 12.x through 12.1, the smackerdecodetree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service bitstream.c:buildtable out-of-bounds read and application crash via a crafted Smacker stream...

CVE-2017-16803

In Libav through 11.11 and 12.x through 12.1, the smackerdecodetree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service bitstream.c:buildtable out-of-bounds read and application crash via a crafted Smacker stream...

CVE-2017-16803: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Libav through 11.11 and 12.x through 12.1, the smackerdecodetree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service bitstream.c:buildtable out-of-bounds read and application crash via a crafted Smacker stream...

PT-2017-14572

Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.12 and 12.x through 12.1 Description The issue arises from the smacker decode tree function in libavcodec/smacker.c, which fails to properly restrict tree recursion. This allows remote attackers to cause a denial of...