1357 matches found
CVE-2016-7477
The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...
Stack overflow
Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
CVE-2016-7393
Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
CVE-2016-7393
Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
CVE-2016-8676
The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...
DEBIAN-CVE-2016-7393
Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
CVE-2016-8675
The getvlc2 function in getbits.h in Libav before 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file, possibly related to startcode sequences during m4v detection...
UBUNTU-CVE-2016-7499
The sbrmakefmaster function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...
CVE-2016-7499
The sbrmakefmaster function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...
UBUNTU-CVE-2016-8676
The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...
CVE-2016-7477
The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...
CVE-2016-8675
The getvlc2 function in getbits.h in Libav before 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file, possibly related to startcode sequences during m4v detection...
CVE-2016-8676
The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...
CVE-2016-7477
The CVE-2016-7477 entry concerns Libav 11.7. The vulnerable component is the function ff_put_pixels8_xy2_mmx in rnd_template.c, where a crafted mp3 file can trigger a denial of service via invalid memory access that crashes the application. The issue was originally noted as involving a NULL point...
CVE-2016-7499
CVE-2016-7499 affects Libav 11.7, specifically the sbr_make_f_master function in libavcodec/aacsbr.c . A crafted MP3 file can trigger a divide-by-zero in this routine, leading to a remote denial of service and application crash. Connected documents corroborate the same description across multiple...
CVE-2016-8675
CVE-2016-8675 affects Libav: the get_vlc2 function in get_bits.h is vulnerable in Libav versions before 11.9, allowing remote attackers to cause a denial of service via a crafted MP3 file, possibly related to startcode sequences during m4v detection. The issue is documented across multiple source...
CVE-2016-8676
CVE-2016-8676 affects Libav 11.9: the get_vlc2 function in get_bits.h can be triggered by a crafted MP3 to cause a denial-of-service via a NULL pointer dereference leading to a crash. This vulnerability is described as stemming from an incomplete fix for CVE-2016-8675. The connected documents con...
CVE-2016-8676
The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...
CVE-2016-8675
The getvlc2 function in getbits.h in Libav before 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file, possibly related to startcode sequences during m4v detection...