Lucene search
+L

1420 matches found

OSV
OSV
•added 2017/11/21 8:29 a.m.•34 views

CVE-2017-16840

The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service out-of-bounds read because of incorrect buffer padding for non-Haar wavelets, related to libavcodec/vc2enc.c and libavcodec/vc2encdwt.c...

9.8CVSS9.1AI score
SaveExploits0References4
NVD
NVD
•added 2017/11/21 8:29 a.m.•30 views

CVE-2017-16840

The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service out-of-bounds read because of incorrect buffer padding for non-Haar wavelets, related to libavcodec/vc2enc.c and libavcodec/vc2encdwt.c...

9.8CVSS9.2AI score0.03332EPSS
SaveExploits0References4
Prion
Prion
•added 2017/11/21 8:29 a.m.•31 views

Out-of-bounds

The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service out-of-bounds read because of incorrect buffer padding for non-Haar wavelets, related to libavcodec/vc2enc.c and libavcodec/vc2encdwt.c...

7.5CVSS9.1AI score0.03332EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
•added 2017/11/21 8:00 a.m.•50 views

CVE-2017-16840

The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service out-of-bounds read because of incorrect buffer padding for non-Haar wavelets, related to libavcodec/vc2enc.c and libavcodec/vc2encdwt.c...

9.2AI score0.03332EPSS
SaveExploits0References4
CNVD
CNVD
•added 2017/11/21 12:00 a.m.•15 views

libbpg libavcodec 'restore_tqb_pixels' function denial of service vulnerability

libbpg is a new image format library. libavcodec is one of the general-purpose encoding/decoding libraries. A security vulnerability exists in the 'restoretqbpixels' function of the hevcfilter.c file of libavcodec used in libbpg version 0.9.7 and other products. A remote attacker could exploit th...

8.8CVSS6.9AI score0.01522EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/21 12:00 a.m.•0 views

CVE-2017-16840: Out-of-bounds Read

The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service out-of-bounds read because of incorrect buffer padding for non-Haar wavelets, related to libavcodec/vc2enc.c and libavcodec/vc2encdwt.c...

9.8CVSS7.4AI score0.03332EPSS
SaveExploits0References2
NVD
NVD
•added 2017/11/16 4:29 a.m.•30 views

CVE-2017-14034

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...

8.8CVSS9.2AI score0.01522EPSS
SaveExploits1References1
Prion
Prion
•added 2017/11/16 4:29 a.m.•24 views

Heap overflow

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...

6.8CVSS9AI score0.01522EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2017/11/16 4:29 a.m.•14 views

CVE-2017-14034

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...

8.8CVSS6.1AI score0.01522EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2017/11/16 4:00 a.m.•34 views

CVE-2017-14034

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...

9.2AI score0.01522EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/16 12:00 a.m.•2 views

CVE-2017-14034: Out-of-bounds Read

The restoretqbpixels function in hevcfilter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impa...

8.8CVSS8AI score0.01522EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/13 12:00 a.m.•2 views

CVE-2017-16803: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Libav through 11.11 and 12.x through 12.1, the smackerdecodetree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service bitstream.c:buildtable out-of-bounds read and application crash via a crafted Smacker stream...

7.5CVSS7.4AI score0.0301EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/11/07 12:00 a.m.•33 views

FFmpeg Buffer Out-of-Bounds Read Vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer out-of-bounds read vulnerability exists in the readheader function in libavcodec/ffv1dec.c in 3.3.4 and earlier versions of Ffmpeg. An...

8.8CVSS7.8AI score0.02EPSS
SaveExploits0References1
Prion
Prion
•added 2017/11/06 5:29 p.m.•30 views

Out-of-bounds

The readheader function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read...

6.8CVSS8.7AI score0.02EPSS
SaveExploits0References6Affected Software2
CVE
CVE
•added 2017/11/06 5:00 p.m.•108 views

CVE-2017-15672

CVE-2017-15672 affects FFmpeg’s libavcodec/ffv1dec.c: a crafted MP4 file can trigger an out-of-bounds read, impacting FFmpeg 2.4/3.3.4 (and possibly earlier). Connected advisories confirm the vulnerability and document fixes in later FFmpeg releases (e.g., openSUSE openSUSE-2018-172 patching to 3...

8.8CVSS7.6AI score0.02EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/06 12:00 a.m.•2 views

CVE-2017-15672: Out-of-bounds Read

The readheader function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read...

8.8CVSS7.8AI score0.02EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/10/24 12:00 a.m.•9 views

Memory corruption vulnerability exists in QQ Video (CNVD-2017-34291)

QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in the libavcodec module of QQ Video Player when parsing certain format ogg files, which can be exploited by attackers to cause a denial of service attack...

6.6AI score
SaveExploits0
OSV
OSV
•added 2017/09/28 1:29 a.m.•12 views

CVE-2017-14796

The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service integer underflow and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copyCTBtohv in hevcfilter.c in libavcodec in...

8.8CVSS5.9AI score0.01522EPSS
SaveExploits1References1
NVD
NVD
•added 2017/09/28 1:29 a.m.•32 views

CVE-2017-14795

The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service out-of-bounds read and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with hlspcmsample in hevc.c in libavcodec in FFmp...

8.8CVSS8.9AI score0.01343EPSS
SaveExploits1References1
Prion
Prion
•added 2017/09/28 1:29 a.m.•18 views

Integer overflow

The hevcwriteframe function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service integer underflow and application crash or possibly have unspecified other impact via a crafted BPG file, related to improper interaction with copyCTBtohv in hevcfilter.c in libavcodec in...

6.8CVSS8.9AI score0.01522EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder