PT-2019-6256

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2 Description The issue is related to a Divide By Zero problem in the libavcodec/lpc.h component of the FFmpeg multimedia library. This allows a remote attacker to cause a Denial of Service. Recommendations For FFmpeg version...

Debian DLA-1809-1 : libav security update

Two more security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2018-15822 The flvwritepacket function in libavformat/flvenc.c in libav did not check for an empty audio packet, leading to an assertion failure. CVE-2019-11338 libavcodec/hevcdec.c...

CVE-2017-5984

In libavcodec in Libav 9.21, ffh264executerefpicmarking has a heap-based buffer over-read...

UBUNTU-CVE-2017-5984

In libavcodec in Libav 9.21, ffh264executerefpicmarking has a heap-based buffer over-read...

Heap overflow

In libavcodec in Libav 9.21, ffh264executerefpicmarking has a heap-based buffer over-read...

CVE-2017-5984

In libavcodec in Libav 9.21, ffh264executerefpicmarking has a heap-based buffer over-read...

CVE-2017-5984

In libavcodec in Libav 9.21, ffh264executerefpicmarking has a heap-based buffer over-read...

CVE-2017-5984

In libavcodec in Libav 9.21, ffh264executerefpicmarking has a heap-based buffer over-read...

CVE-2017-5984

In libavcodec in Libav 9.21, ffh264executerefpicmarking has a heap-based buffer over-read...

CVE-2017-5984

CVE-2017-5984 affects Libav 9.21 (libavcodec) with a heap-based buffer over-read in ff_h264_execute_ref_pic_marking(). Connected sources confirm the vulnerability in Libav/libavcodec and reference a patch (libav.patch 62534) addressing this issue; public advisories list the flaw and its impact. T...

CVE-2017-5984: Out-of-bounds Read

In libavcodec in Libav 9.21, ffh264executerefpicmarking has a heap-based buffer over-read...

CVE-2019-9718

In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

FFmpeg <= 4.1.2 Denial of Service (DoS) Vulnerability

FFmpeg is prone to a denial of service vulnerability. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...

Null pointer dereference

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service NULL pointer dereference and out-of-array access or possibly have unspecified other impact via crafted HEVC data...

CVE-2019-11338

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service NULL pointer dereference and out-of-array access or possibly have unspecified other impact via crafted HEVC data...

CVE-2019-11338

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service NULL pointer dereference and out-of-array access or possibly have unspecified other impact via crafted HEVC data...

CVE-2019-11339: Out-of-bounds Read

The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via crafted MPEG-4 video data...

CVE-2019-11338: NULL Pointer Dereference

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service NULL pointer dereference and out-of-array access or possibly have unspecified other impact via crafted HEVC data...

Format string

In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

CVE-2019-9721

A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handleopenbrace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...