CVE-2016-7477

The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...

CVE-2016-7393

Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-7393

CVE-2016-7393 affects Libav prior to 11.5, where the aac_sync function in libavcodec/aac_parser.c can overflow a stack-based buffer when processing crafted files. This leads to a denial of service via an out-of-bounds read. Affected component/version: Libav before 11.5 (aac_parser.c, aac_sync). T...

CVE-2016-7393

Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-7393

Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

Heap overflow

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

CVE-2016-6832

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

CVE-2016-6832

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

CVE-2016-6832

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

CVE-2016-6832

The CVE-2016-6832 vulnerability affects libav prior to 11.4, where a heap-based buffer overflow in ff_audio_resample (resample.c) can be triggered by vectors related to buffer resizing, potentially causing a denial-of-service (crash). Affected component is the libav stack (ff_audio_resample in re...

CVE-2016-6832

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

CVE-2016-6832

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

PT-2017-9212

Name of the Vulnerable Software and Affected Versions Libav version 11.7 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted mp3 file. This is due to a problem in the sbr make f master function...

PT-2017-9725

Name of the Vulnerable Software and Affected Versions Libav version 11.9 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and crash, via a crafted mp3 file. This problem exists due to an incomplete fix for a previous issue...

PT-2017-9031

Name of the Vulnerable Software and Affected Versions libav versions prior to 11.4 Description The issue is related to a heap-based buffer overflow in the ff audio resample function, which can be triggered by vectors related to buffer resizing, potentially causing a denial of service crash...

PT-2017-9197

Name of the Vulnerable Software and Affected Versions Libav version 11.7 Description The issue allows remote attackers to cause a denial of service, resulting in invalid memory access and a crash, via a crafted mp3 file. This is due to a problem in the ff put pixels8 xy2 mmx function in rnd...

PT-2017-9724

Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.9 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This can be achieved by providing a crafted mp3 file, possibly related to startcod...

PT-2017-9180

Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.5 Description The issue is a stack-based buffer overflow in the aac sync function, located in aac parser.c, which can be triggered by a crafted file. This can cause a denial of service due to an out-of-bounds read...

CVE-2016-6832: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the ffaudioresample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service crash via vectors related to buffer resizing...

CVE-2016-8676: NULL Pointer Dereference

The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...