openSUSE 15 Security Update : ffmpeg (openSUSE-SU-2021:3193-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3193-1 advisory. - adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the seco...

Arbitrary Code Execution

ffmpeg is vulnerable to arbitrary code execution. A heap-based buffer overflow vulnerability in libavcodec/getbits.h when writing .mov files allows an attacker to execute arbitrary code on the host OS...

Ffmpeg out-of-bounds read/write vulnerability

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. ffmpeg has an out-of-bounds read/write vulnerability in version 4.4 summary, which originates from FFmpeg's libavcodec dnxhddec.c not checking the return value of the init vlc function,...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

Design/Logic Flaw

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

CVE-2021-38114

CVE-2021-38114 affects FFmpeg 4.4’s libavcodec/dnxhddec.c, where the init_vlc() function’s return value is not checked, potentially leading to an unspecified impact (Debian and CNVD references describe it as a broader FFmpeg vulnerability with possible denial of service/out-of-bounds effects). Af...

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. ffmpeg has an out-of-bounds read/write vulnerability in version 4.4 summary, which originates from FFmpeg's libavcodec dnxhddec.c not checking the return value of the init vlc function,...

Security update for ffmpeg (important)

openSUSE Security Update: Security update for ffmpeg Announcement ID: openSUSE-SU-2021:2322-1 Rating: important References: 1172640 1186406 1186583 1186586 1186587 1186596 1186597 1186598 1186600 1186603 1186604 1186605 1186613 1186614 1186615 1186616 1186658 1186660 1186757 1186758 1186762 11867...

Updated ffmpeg packages fix a security vulnerability

An out-of-bounds write in decodeframe in libavcodec/exr.c because of errors in calculations of when to perform memset zero operations CVE-2020-35965...

CVE-2021-33815

dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...

UBUNTU-CVE-2021-33815

dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...

CVE-2021-33815

dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...

FFmpeg 输入验证错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg, which stems from dwauncompress in libavcodec/exr.c that does not strictly check dccount, and can be exploited by an attacker to cross-border array access...

CVE-2021-33815

dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...

FFmpeg heap buffer overflow vulnerability (CNVD-2021-39761)

FFmpeg is a complete solution for recording, converting and streaming audio and video. A heap buffer overflow vulnerability exists in libavcodec/getbits.h in FFmpeg version 4.2 when writing to .mov files. An attacker could exploit this vulnerability to cause memory corruption...

DEBIAN-CVE-2020-22016

A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/getbits.h when writing .mov files, which might lead to memory corruption and other potential consequences...