CVE-2013-0848

CVE-2013-0848 concerns FFmpeg/libav’s decode_init in libavcodec/huffyuv.c, where before 1.1 the predictor set to median with width crafted in huffyuv data (colorspace YUV422P) can cause an out-of-bounds array access. The connected advisories confirm multiple vendors released fixes and updated pac...

CVE-2013-0850

CVE-2013-0850 describes a vulnerability in FFmpeg’s libavcodec/h264.c decode_slice_header, where crafted H.264 data could trigger an out-of-bounds access. The issue affects FFmpeg prior to 1.1 (libav in common libavutil/libavcodec code paths) and has been referenced across multiple trackers (NVD,...

CVE-2013-0849

CVE-2013-0849 affects FFmpeg/libav, specifically the roq_decode_init function in libavcodec/roqvideodec.c. A crafted RoQ video data width or height not a multiple of sixteen can allow a remote attacker to cause an unspecified impact. Publicly referenced mitigations exist in Debian advisory DSA-28...

CVE-2013-0845

The CVE-2013-0845 issue affects FFmpeg’s libavcodec/alsdec.c (FFmpeg before 1.0.4). A crafted block length can cause an out-of-bounds write, enabling remote attackers to trigger an unspecified impact. The documentation does not provide exploit details. Remediation: upgrade FFmpeg to version 1.0.4...

CVE-2013-0844

FFmpeg/libavcodec contains an out-of-bounds access caused by an off-by-one error in adpcm_decode_frame (libavcodec/adpcm.c). Affected product: FFmpeg prior to 1.0.4. Impact: remote attackers could trigger the vulnerability via crafted DK4 data, leading to unspecified effects. The issue is resolve...

CVE-2013-0851

CVE-2013-0851 : FFmpeg’s decode_frame routine in libavcodec/eamad.c is vulnerable to an out-of-bounds array access when processing crafted Electronic Arts Madcow video data, affecting FFmpeg versions prior to 1.1. This remote issue can trigger a crash or unspecified impact. The CVE is documented ...

CVE-2013-0855

CVE-2013-0855 affects FFmpeg’s libavcodec/alac.c alac_decode_close. Affected: FFmpeg before 1.1. Triggered by a large number of ALAC samples per frame, causing an out-of-bounds access. Impact is unspecified in the sources. Mitigation: upgrade FFmpeg to 1.1 or later (or apply vendor-specific patch...

CVE-2013-0856

The lpcprediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossless Audio Codec ALAC data, related to a large nbsamples value...

CVE-2013-0846

Array index error in the qdm2decodesuperblock function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access...

CVE-2013-0854

The mjpegdecodescanprogressiveac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data...

CVE-2013-0860

The fferframeend function in libavcodec/errorresilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to trigger a NULL pointer dereference via crafted picture data...

CVE-2013-0861

The avcodecdecodeaudio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 allows remote attackers to trigger memory corruption via vectors related to the channel layout...

Out-of-bounds

The gifcopyimgrect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "end pointer," which allows remote attackers to have an unspecified impact via crafted GIF data that triggers an out-of-bounds array access...

Design/Logic Flaw

libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and 1 unchecked return codes from the initvlc function and 2 "len==0 cases."...

CVE-2013-0868

libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and 1 unchecked return codes from the initvlc function and 2 "len==0 cases."...

CVE-2013-0862

CVE-2013-0862 affects FFmpeg (libavcodec/sanm.c: process_frame_obj). The vulnerability is due to multiple integer overflows that can cause an out-of-bounds access when processing LucasArts Smush image data, leading to potential arbitrary impact on confidentiality, integrity, and availability. Aff...

CVE-2013-0861

The CVE-2013-0861 vulnerability affects FFmpeg’s avcodec_decode_audio4 function (libavcodec/utils.c) and allows remote triggers of memory corruption through channel layout vectors. Affected versions are FFmpeg before 1.0.4 and 1.1.x before 1.1.1. Documents consistently describe this as a remote-c...

CVE-2013-0864

CVE-2013-0864 affects FFmpeg prior to 1.1.2. The vulnerability is in libavcodec/gifdec.c:gif_copy_img_rect, where an incorrect calculation for the end pointer enables remote attackers to trigger an out-of-bounds array access via crafted GIF data, with unspecified impact. The issue is mitigated by...

CVE-2013-0865

CVE-2013-0865 affects FFmpeg/libav: the vqa_decode_chunk function in libavcodec/vqavideo.c allows an out-of-bounds write through large cbp0 or cbpz chunks in Westwood VQA video files. The issue is fixed in FFmpeg releases >= 1.0.4 and >= 1.1.2. Remediation is to upgrade FFmpeg/libav to a ve...

CVE-2013-0863

CVE-2013-0863 : FFmpeg contains a buffer overflow in the rle_decode function (libavcodec/sanm.c) that affects FFmpeg releases before 1.0.4 and 1.1.x before 1.1.2 when processing crafted LucasArts Smush video data. The vulnerability could allow a remote attacker to cause arbitrary code execution o...