PT-2012-4272

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.4 Description The issue is related to dimensions and "out of array writes" in the libavcodec/avs.c file. The impact and attack vectors of this...

PT-2012-4266

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Description The issue involves multiple unspecified vulnerabilities in the libavcodec/wmalosslessdec.c component of FFmpeg. These vulnerabilities are related to three main areas: 1 the size of mclms arrays, 2 a ge...

PT-2012-4251

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.4 Description The issue is related to the decode pic function in libavcodec/cavsdec.c, specifically concerning "width/height changing in CAVS"...

PT-2012-4265

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.4 Description The issue is related to an unspecified vulnerability in the decode mb info function, located in libavcodec/indeo5.c. This...

PT-2012-4267

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions prior to 0.8.4 Description The issue is related to inconsistencies in coded slice positions and interlacing that trigger out of array writes in the vc1 decode frame function. This function is locate...

PT-2012-4262

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.5 Description The issue is related to multiple unspecified vulnerabilities in the decode band hdr function in indeo4.c and the ff ivi decode...

PT-2012-4257

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.4 Description The issue is related to an "out of array write" in the decode wdlt function in libavcodec/dfa.c. The impact and attack vectors of...

PT-2012-4268

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions prior to 0.8.5 Description The issue is related to a calculation in the decode frame mp3on4 function in libavcodec/mpegaudiodec.c that prevents a frame from being "large enough." The impact and atta...

PT-2012-4256

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Description The issue is related to multiple unspecified vulnerabilities in the libavcodec/wmalosslessdec.c component of FFmpeg. These vulnerabilities have unknown impact and attack vectors, and are related to...

PT-2012-4274

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.11 Libav versions 0.7.x prior to 0.7.7 Libav versions 0.8.x prior to 0.8.5 Description A double free vulnerability exists in the mpeg decode frame function, located in libavcodec/mpeg12.c, which has unknown impact an...

CVE-2012-2798: Undefined Security Weakness

Unspecified vulnerability in the decodedds1 function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."...

CVE-2012-2785: Undefined Security Weakness

Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors, related to 1 "some subframes only encode some channels" or 2 a large order value...

CVE-2012-2799: Undefined Security Weakness

Unspecified vulnerability in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "put bit buffer when numsavedbits is reset."...

CVE-2012-0855

Heap-based buffer overflow in the getsot function in the J2K decoder j2k.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash via unspecified vectors related to the curtileno variable...

CVE-2012-0849

Integer overflow in the ffj2kdwtinit function in libavcodec/j2kdwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted JPEG2000 image that triggers an incorrect check for a negative value...

CVE-2012-0849

Integer overflow in the ffj2kdwtinit function in libavcodec/j2kdwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted JPEG2000 image that triggers an incorrect check for a negative value...

Heap overflow

Heap-based buffer overflow in the getsot function in the J2K decoder j2k.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash via unspecified vectors related to the curtileno variable...

CVE-2012-0855

The CVE-2012-0855 vulnerability affects FFmpeg’s libavcodec J2K decoder (get_sot in j2k.c). It is a heap-based buffer overflow that can be triggered remotely to cause an application crash (denial of service) and is associated with FFmpeg versions prior to 0.9.1. No exploitation vectors, specific ...

CVE-2012-0855

Heap-based buffer overflow in the getsot function in the J2K decoder j2k.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash via unspecified vectors related to the curtileno variable...

CVE-2012-0849

FFmpeg vulnerability CVE-2012-0849: Integer overflow in ff_j2k_dwt_init (libavcodec/j2k_dwt.c) present in FFmpeg before 0.9.1, enabling remote denial of service via a crafted JPEG2000 image that triggers an incorrect negative-value check. Documents confirm the affected component and root cause bu...