CVE-2016-7499: Divide By Zero

The sbrmakefmaster function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...

CVE-2016-7477: NULL Pointer Dereference

The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...

CVE-2016-8675: NULL Pointer Dereference

The getvlc2 function in getbits.h in Libav before 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file, possibly related to startcode sequences during m4v detection...

CVE-2016-7393: Out-of-bounds Read

Stack-based buffer overflow in the aacsync function in aacparser.c in Libav before 11.5 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-10192

Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size...

PT-2018-5227

Name of the Vulnerable Software and Affected Versions libav version 13 dev0 ffmpeg version n3.4 chromium versions prior to 56 before Feb 13, 2017 Description The issue arises from the return value of init get bits being ignored, leading to get ue golomb&gb being called on an uninitialized get bit...

Debian DLA-791-1 : libav security update

Multiple integer overflows have been discovered in libav 11.8 and earlier, allowing remote attackers to cause a crash via a crafted MP3 file. For Debian 7 'Wheezy', these problems have been fixed in version 6:0.8.20-0+deb7u1. We recommend that you upgrade your libav packages. NOTE: Tenable Networ...

[SECURITY] [DLA 791-1] libav security update

Package : libav Version : 6:0.8.20-0+deb7u1 CVE ID : CVE-2016-9819 CVE-2016-9820 CVE-2016-9821 CVE-2016-9822 Multiple integer overflows have been discovered in libav 11.8 and earlier, allowing remote attackers to cause a crash via a crafted MP3 file. For Debian 7 "Wheezy", these problems have bee...

DLA-791-1 libav - security update

Bulletin has no description...

Debian DLA-780-1 : libav security update

Multiple vulnerabilities have been found in libav : CVE-2016-7424 The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted MP3 file. No CVE assigned The h264 codec is...

[SECURITY] [DLA 780-1] libav security update

Package : libav Version : 6:0.8.19-0+deb7u1 CVE ID : CVE-2016-7424 Multiple vulnerabilities have been found in libav: CVE-2016-7424 The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and...

DLA-780-1 libav - security update

Bulletin has no description...

Libav Denial of Service Vulnerability (CNVD-2016-12208)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12209)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12210)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12211)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12213)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12215)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12212)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12214)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...