CVE-2014-2098

The CVE-2014-2098 issue affects FFmpeg: libavcodec/wmalosslessdec.c before 2.1.4 uses an incorrect data-structure size for certain coefficients, enabling memory corruption/denial of service via crafted WMA data. Affected product: FFmpeg (libavcodec). Root cause: incorrect coefficient data structu...

CVE-2014-2097

The takdecodeframe function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted TAK aka Tom's lossless...

CVE-2014-2099

FFmpeg vulnerability CVE-2014-2099: The msrle_decode_frame function in libavcodec/msrle.c does not correctly calculate line sizes, enabling remote attackers to trigger a denial of service via out-of-bounds array access with crafted Microsoft RLE video data. Affected software: FFmpeg before 2.1.4....

CVE-2014-2098

libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted WMA data...

CVE-2012-6615

The ffasssplitoverridecodes function in libavcodec/asssplit.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a subtitle dialog without text...

Out-of-bounds

The movtextdecodeframe function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service out-of-bounds read and crash via crafted 3GPP TS 26.245 data...

CVE-2012-6615

CVE-2012-6615 affects FFmpeg prior to 1.0.2. The vulnerability is in the function ff_ass_split_override_codes (libavcodec/ass_split.c), where processing a subtitle dialog without text can trigger a NULL pointer dereference, leading to denial of service (crash). This is a remote issue with network...

CVE-2012-6616

The CVE-2012-6616 issue affects FFmpeg’s mov_text_decode_frame in libavcodec/movtextdec.c prior to 1.0.2, enabling remote attackers to trigger an out-of-bounds read and crash via crafted 3GPP TS 26.245 data. Multiple advisories (Debian, UBUNTU, Red Hat, NVD, CVE.org, OSV, Nessus) reference this f...

CVE-2013-4358

libavcodec/h264.c in FFmpeg before 0.11.4 allows remote attackers to cause a denial of service crash via vectors related to alternating bit depths in H.264 data...

CVE-2013-4358

CVE-2013-4358 affects FFmpeg, specifically the libavcodec/h264.c path, with vulnerable code present in FFmpeg before 0.11.4. The issue allows remote attackers to trigger a denial of service (crash) via vectors related to alternating bit depths in H.264 data. Documents indicate a bug in FFmpeg’s H...

CVE-2013-7024

The jpeg2000decodetile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not consider the component number in certain calculations, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 dat...

CVE-2013-7014

Integer signedness error in the addbytesl2c function in libavcodec/pngdsp.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted PNG data...

DEBIAN-CVE-2013-7009

The rpzadecodestream function in libavcodec/rpza.c in FFmpeg before 2.1 does not properly maintain a pointer to pixel data, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted Apple RPZA data...

Out-of-bounds

The getcox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not properly validate the reduction factor, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...

Code injection

The diracunpackidwtparams function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Dirac data...

Null pointer dereference

libavcodec/jpeg2000.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service invalid pointer dereference or possibly have unspecified other impact via crafted JPEG2000 data...

Out-of-bounds

The getsiz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not prevent attempts to use non-zero image offsets, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...

CVE-2013-7017

libavcodec/jpeg2000.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service invalid pointer dereference or possibly have unspecified other impact via crafted JPEG2000 data...

Integer overflow

Integer signedness error in the addbytesl2c function in libavcodec/pngdsp.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted PNG data...

CVE-2013-7018

libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use of valid code-block dimension values, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG2000 data...