CVE-2021-30123

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

CVE-2021-30123

CVE-2021-30123 concerns FFmpeg up to 4.3, where a buffer overflow in libavcodec triggered by a crafted file may enable remote code execution. Affected product: FFmpeg (libavcodec component) on versions = 4.4) or apply vendor-specific patches; Gentoo GLSA 202105-24 explicitly instructs upgrading t...

CVE-2021-30123

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

CVE-2021-30123

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

CVE-2021-30123

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

CVE-2021-30123: Buffer Copy without Checking Size of Input

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

FFmpeg 缓冲区错误漏洞

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in libavcodec in FFmpeg 4.3 and earlier versions. An attacker could exploit this vulnerability via speciall...

CVE-2020-35965

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

CVE-2020-35965

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

Out-of-bounds

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

CVE-2020-35965

CVE-2020-35965 affects FFmpeg 4.3.1’s libavcodec/exr.c, where decode_frame can write out of bounds due to faulty calculations of when to perform memset zero operations. This is a memory corruption risk described across multiple advisories tied to FFmpeg vulnerabilities. From the connected documen...

CVE-2020-35965

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

CVE-2020-35965: Out-of-bounds Write

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

PT-2020-6180

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3.1 Description The issue is related to the decode frame function in the libavcodec/exr.c component, which has an out-of-bounds write due to errors in calculations. This can be exploited by a remote attacker to cause a denial ...

Buffer Overflows

cbsjpegsplitfragment in libavcodec/cbsjpeg.c in FFmpeg 4.2.2 has a heap-based buffer overflow during JPEGMARKERSOS handling because of a missing length check...

Denial Of Service (DoS)

FFmpeg is vulnerable to Denial Of Service DoS. The avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service. An attacker is able to hog the CPU via a malicious video file in Matroska format as the handleopenbrace function in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. An attacker is able to cause excessive CPU consumption via a malicious video file in Matroska format as the ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The decodeinit function in libavcodec/utvideodec.c allows remote attackers to cause a denial of service via a malicious AVI file...

Arbitrary Code Execution

ffmpeg is vulnerable to arbitrary code execution. The vulnerability exists as the avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring...