Out-of-Bounds Write

FFmpeg is vulnerable to an out-of-bounds write. A malicious user can use this to cause a system crash or to overwrite variables currently in the buffer. This can be done using the decodeframecommon function in libavcodec/pngdec.c...

Out-of-Bounds Write

FFmpeg is vulnerable to an out-of-bounds write. A malicious user can use this to cause a system crash or to overwrite variables currently in the buffer. This can be done through the decodeframe function in libavcodec/pictordec.c...

Out-of-Bounds Write

FFmpeg is vulnerable to an out-of-bounds write. A malicious user can use this to cause a system crash or to overwrite variables currently in the buffer. This can be done through the ffh264slicecontextinit function in libavcodec/h264dec.c...

Heap overflow

FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideodecodeblockopcode0xA function in libavcodec/interplayvideo.c and the avcodecaligndimensions2 function in libavcodec/utils.c...

Heap overflow

FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decodeframecommon function in libavcodec/pngdec.c...

Stack overflow

FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decodezbuf function in libavcodec/pngdec.c...

CVE-2017-7865

FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideodecodeblockopcode0xA function in libavcodec/interplayvideo.c and the avcodecaligndimensions2 function in libavcodec/utils.c...

DEBIAN-CVE-2017-7866

FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decodezbuf function in libavcodec/pngdec.c...

CVE-2017-7865

FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideodecodeblockopcode0xA function in libavcodec/interplayvideo.c and the avcodecaligndimensions2 function in libavcodec/utils.c...

CVE-2017-7862

FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decodeframe function in libavcodec/pictordec.c...

CVE-2017-7866

FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decodezbuf function in libavcodec/pngdec.c...

CVE-2017-7859

FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ffh264slicecontextinit function in libavcodec/h264dec.c...

CVE-2017-7859

FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ffh264slicecontextinit function in libavcodec/h264dec.c...

CVE-2017-7863

FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decodeframecommon function in libavcodec/pngdec.c...

CVE-2017-7866

FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decodezbuf function in libavcodec/pngdec.c...

CVE-2017-7863

FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decodeframecommon function in libavcodec/pngdec.c...

CVE-2017-7863

CVE-2017-7863 is a FFmpeg vulnerability: an out-of-bounds write caused by a heap-based buffer overflow in libavcodec/pngdec.c (decode_frame_common). The impact is an out-of-bounds write that could affect affected FFmpeg builds. Public documents confirm the issue and reference FFmpeg/libav demuxer...

CVE-2017-7863

FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decodeframecommon function in libavcodec/pngdec.c...

CVE-2017-7866

Summary : CVE-2017-7866 affects FFmpeg prior to patched builds, with an out-of-bounds write caused by a stack-based buffer overflow in the decode_zbuf path of libavcodec/pngdec.c . This concrete issue was addressed in FFmpeg/OpenSUSE advisories (e.g., openSUSE-2017-631, openSUSE-2017-1067) which ...

CVE-2017-7862

CVE-2017-7862 is a Libav/libavcodec vulnerability: an out-of-bounds write caused by a heap-based buffer overflow in decode_frame (libavcodec/pictordec.c). Public advisories (Debian DSA-4012, OpenVAS entries) confirm this affects multiple demuxers/decoders and can lead to denial of service or cras...