CVE-2013-0853

CVE-2013-0853 refers to a vulnerability in FFmpeg/libav where the wavpack_decode_frame function in libavcodec/wavpack.c could be triggered by crafted WavPack data, causing an out-of-bounds array access (likely due to an off-by-one error). The issue is exploitable remotely and is due to memory cor...

CVE-2013-0852

The parsepicturesegment function in libavcodec/pgssubdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted RLE data, which triggers an out-of-bounds array access...

CVE-2013-0853

The wavpackdecodeframe function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error...

CVE-2013-0851

CVE-2013-0851 : FFmpeg’s decode_frame routine in libavcodec/eamad.c is vulnerable to an out-of-bounds array access when processing crafted Electronic Arts Madcow video data, affecting FFmpeg versions prior to 1.1. This remote issue can trigger a crash or unspecified impact. The CVE is documented ...

CVE-2013-0854

CVE-2013-0854 concerns FFmpeg’s libavcodec/mjpegdec.c, where the function mjpeg_decode_scan_progressive_ac in FFmpeg prior to 1.1 mishandles crafted MJPEG data. The result is a remote, unauthenticated impact (unspecified in the sources) that could affect affected decoding paths. This vulnerabilit...

CVE-2013-0844

FFmpeg/libavcodec contains an out-of-bounds access caused by an off-by-one error in adpcm_decode_frame (libavcodec/adpcm.c). Affected product: FFmpeg prior to 1.0.4. Impact: remote attackers could trigger the vulnerability via crafted DK4 data, leading to unspecified effects. The issue is resolve...

CVE-2013-0845

The CVE-2013-0845 issue affects FFmpeg’s libavcodec/alsdec.c (FFmpeg before 1.0.4). A crafted block length can cause an out-of-bounds write, enabling remote attackers to trigger an unspecified impact. The documentation does not provide exploit details. Remediation: upgrade FFmpeg to version 1.0.4...

CVE-2013-0858

CVE-2013-0858 affects FFmpeg/libav: the atrac3_decode_init function in libavcodec/atrac3.c, prior to FFmpeg 1.0.4, allows remote attackers to induce an unspecified impact through ATRAC3 data when the joint stereo coding mode is used and there are fewer than two channels. The vulnerability is repo...

CVE-2013-0848

CVE-2013-0848 concerns FFmpeg/libav’s decode_init in libavcodec/huffyuv.c, where before 1.1 the predictor set to median with width crafted in huffyuv data (colorspace YUV422P) can cause an out-of-bounds array access. The connected advisories confirm multiple vendors released fixes and updated pac...

CVE-2013-0849

CVE-2013-0849 affects FFmpeg/libav, specifically the roq_decode_init function in libavcodec/roqvideodec.c. A crafted RoQ video data width or height not a multiple of sixteen can allow a remote attacker to cause an unspecified impact. Publicly referenced mitigations exist in Debian advisory DSA-28...

CVE-2013-0850

CVE-2013-0850 describes a vulnerability in FFmpeg’s libavcodec/h264.c decode_slice_header, where crafted H.264 data could trigger an out-of-bounds access. The issue affects FFmpeg prior to 1.1 (libav in common libavutil/libavcodec code paths) and has been referenced across multiple trackers (NVD,...

CVE-2013-0855

CVE-2013-0855 affects FFmpeg’s libavcodec/alac.c alac_decode_close. Affected: FFmpeg before 1.1. Triggered by a large number of ALAC samples per frame, causing an out-of-bounds access. Impact is unspecified in the sources. Mitigation: upgrade FFmpeg to 1.1 or later (or apply vendor-specific patch...

CVE-2013-0846

Array index error in the qdm2decodesuperblock function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access...

CVE-2013-0854

The mjpegdecodescanprogressiveac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data...

CVE-2013-0856

The lpcprediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossless Audio Codec ALAC data, related to a large nbsamples value...

CVE-2013-0860

The fferframeend function in libavcodec/errorresilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to trigger a NULL pointer dereference via crafted picture data...

CVE-2013-0861

The avcodecdecodeaudio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 allows remote attackers to trigger memory corruption via vectors related to the channel layout...

Out-of-bounds

The gifcopyimgrect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "end pointer," which allows remote attackers to have an unspecified impact via crafted GIF data that triggers an out-of-bounds array access...

Design/Logic Flaw

libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and 1 unchecked return codes from the initvlc function and 2 "len==0 cases."...

CVE-2013-0868

libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and 1 unchecked return codes from the initvlc function and 2 "len==0 cases."...