Lucene search
K

1126 matches found

CNNVD
CNNVD
added 2021/05/24 12:0 a.m.2 views

FFmpeg 缓冲区错误漏洞

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in FFmpeg version 4.1. A remote attacker can exploit this vulnerability to cause a denial of service via...

7.5CVSS6.7AI score0.01689EPSS
Exploits1References10
OSV
OSV
added 2021/04/07 8:15 p.m.19 views

CVE-2021-30123

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

8.8CVSS7.9AI score
Exploits0References4
NVD
NVD
added 2021/04/07 8:15 p.m.16 views

CVE-2021-30123

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

8.8CVSS0.03412EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2021/04/07 8:15 p.m.32 views

CVE-2021-30123

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

8.8CVSS7.6AI score0.03412EPSS
Exploits1References4
Prion
Prion
added 2021/04/07 8:15 p.m.28 views

Buffer overflow

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

6.8CVSS9AI score0.03412EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2021/04/07 7:16 p.m.99 views

CVE-2021-30123

CVE-2021-30123 concerns FFmpeg up to 4.3, where a buffer overflow in libavcodec triggered by a crafted file may enable remote code execution. Affected product: FFmpeg (libavcodec component) on versions = 4.4) or apply vendor-specific patches; Gentoo GLSA 202105-24 explicitly instructs upgrading t...

8.8CVSS8.9AI score0.03412EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2021/04/07 7:16 p.m.18 views

CVE-2021-30123

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

8.8CVSS9.1AI score0.03412EPSS
Exploits1
Cvelist
Cvelist
added 2021/04/07 7:16 p.m.18 views

CVE-2021-30123

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

9.3AI score0.03412EPSS
Exploits1References4
AlpineLinux
AlpineLinux
added 2021/04/07 7:16 p.m.45 views

CVE-2021-30123

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

8.8CVSS9.1AI score0.03412EPSS
Exploits1
CNNVD
CNNVD
added 2021/04/07 12:0 a.m.2 views

FFmpeg 缓冲区错误漏洞

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in libavcodec in FFmpeg 4.3 and earlier versions. An attacker could exploit this vulnerability via speciall...

8.8CVSS6.6AI score0.03412EPSS
Exploits1References8
OSV
OSV
added 2021/01/04 2:15 a.m.33 views

CVE-2020-35965

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

7.5CVSS7.2AI score
Exploits0References6
Prion
Prion
added 2021/01/04 2:15 a.m.19 views

Out-of-bounds

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

5CVSS7.9AI score0.01612EPSS
Exploits1References6Affected Software2
UbuntuCve
UbuntuCve
added 2021/01/04 2:15 a.m.26 views

CVE-2020-35965

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

7.5CVSS6.9AI score0.01612EPSS
Exploits1References6
CVE
CVE
added 2021/01/04 1:7 a.m.188 views

CVE-2020-35965

CVE-2020-35965 affects FFmpeg 4.3.1’s libavcodec/exr.c, where decode_frame can write out of bounds due to faulty calculations of when to perform memset zero operations. This is a memory corruption risk described across multiple advisories tied to FFmpeg vulnerabilities. From the connected documen...

7.5CVSS8.4AI score0.01612EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2021/01/04 1:7 a.m.16 views

CVE-2020-35965

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

8.6AI score0.01612EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2020/10/20 12:0 a.m.1 views

PT-2020-6180 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.3.1 Description: The issue is related to the decode frame function in the libavcodec/exr.c component, which has an out-of-bounds write due to errors in calculations. This can be exploited by a remote attacker to cause a denia...

9.8CVSS6.4AI score0.02331EPSS
Exploits44References270
Veracode
Veracode
added 2020/08/06 9:40 p.m.26 views

Buffer Overflows

cbsjpegsplitfragment in libavcodec/cbsjpeg.c in FFmpeg 4.2.2 has a heap-based buffer overflow during JPEGMARKERSOS handling because of a missing length check...

9.8CVSS3.1AI score0.22EPSS
Exploits2References6Affected Software1
Veracode
Veracode
added 2020/08/06 9:37 p.m.22 views

Denial Of Service (DoS)

FFmpeg is vulnerable to Denial Of Service DoS. The avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

9.8CVSS4.6AI score0.00664EPSS
Exploits0References6Affected Software1
Veracode
Veracode
added 2020/06/03 4:7 a.m.31 views

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service. An attacker is able to hog the CPU via a malicious video file in Matroska format as the handleopenbrace function in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

6.5CVSS2.7AI score0.00498EPSS
Exploits0References4Affected Software1
Veracode
Veracode
added 2020/06/03 4:7 a.m.28 views

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. An attacker is able to cause excessive CPU consumption via a malicious video file in Matroska format as the ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

6.5CVSS4.1AI score0.01585EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder