CVE-2016-7502

CVE-2016-7502 affects FFmpeg prior to 3.1.4. The vulnerability lies in the function cavs_idct8_add_c (libavcodec/cavsdsp.c), which can read out-of-bounds memory when decoding with cavs_decode. This could impact systems processing certain cavs-video streams, with potential effects on confidentiali...

CVE-2016-6671

Illustrative vulnerability summary : CVE-2016-6671 affects FFmpeg’s libavcodec/rawdec.c, where the raw_decode function in FFmpeg before 3.1.2 can be exploited by a crafted SWF file to cause memory corruption, leading to denial of service or arbitrary code execution. Affected component: libavcodec...

CVE-2016-7502: Out-of-bounds Read

The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...

CVE-2016-6671: Improper Restriction of Operations within the Bounds of a Memory Buffer

The rawdecode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted SWF file...

Libav 'libavcodec/aacsbr.c' Denial of Service Vulnerability

Libav formerly FFmpeg is Libav team's set of cross-platform audio and video recording and conversion solutions. A denial of service vulnerability exists in Libav version 11.7, which can be exploited by remote attackers to cause a denial of service...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libavcodec-dev package for the Debian GNU/Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

MPlayer libavcodec component out-of-bounds read vulnerability

MPlayer is an open source multimedia player product developed by MPlayer team. libavcodec is one of the encoding and decoding library components. A security vulnerability exists in MPlayer's libavcodec component. An attacker can exploit this vulnerability to cause an out-of-bounds read with an mp...

Design/Logic Flaw

The ffh263decodemba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a file with crafted dimensions...

CVE-2016-1528: FFmpeg libavcodec library buffer overflow

CVE-2016-1528 concerns FFmpeg’s libavcodec with a heap-based buffer overflow caused by improper bounds checking. By convincing a victim to open a specially crafted file, an attacker could overflow a buffer and execute arbitrary code or cause a denial of service. The initial document describes the...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability in the libavcodec/tiff.c function of the FFmpeg multimedia library arises from buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure such as inability to read data outside the array bounds or have other effects by using a specially creat...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the libavcodec/gif.c function in the FFmpeg multimedia library arises from buffer overflow. Exploiting this vulnerability can allow an attacker to cause service failures or potentially have other effects by using a specially created .tga file related to the functions...

FFmpeg Denial of Service Vulnerability (CNVD-2016-01129)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/pngenc.c file in FFmpeg versions prior to 2.8.5, which is caused by the program using incorrect line sizes during line calculations. The...

FFmpeg Denial of Service Vulnerability (CNVD-2016-01131)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/tiff.c file in FFmpeg versions prior to 2.8.6, which stems from the program failing to properly validate the RowsPerStrip value and the...

FFmpeg Denial of Service Vulnerability (CNVD-2016-01132)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/gif.c file in FFmpeg versions prior to 2.8.6, which is caused by the program's failure to correctly calculate the buffer size. This...

CVE-2016-2330

libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .tga file, related to the gifimagewriteimage, gifencodeinit, and...

CVE-2016-2330

libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .tga file, related to the gifimagewriteimage, gifencodeinit, and...

CVE-2016-2329

libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted TIFF file, related to th...

CVE-2016-2327

libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .avi file, related to the apngencodeframe and encodeapng...

CVE-2016-2329

libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted TIFF file, related to th...

CVE-2016-2327

libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .avi file, related to the apngencodeframe and encodeapng...