CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

Integer overflow

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4609

CVE-2014-4609 : Libav’s get_len in libavutil/lzo.c has an integer overflow when processing Literal Runs, allowing remote code execution. Affected are Libav releases before 0.8.13, 9.x before 9.14, and 10.x before 10.2. Impact includes remote code execution with potential impact on confidentiality...

CVE-2014-4610

CVE-2014-4610 concerns an integer overflow in FFmpeg’s libavutil/lzo.c get_len, which allows remote attackers to execute arbitrary code via a crafted Literal Run. Public references enumerate affected FFmpeg branches: before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1...

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

PT-2021-10721 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: A Denial of Service issue exists due to a memory leak at the fifo alloc common function in libavutil/fifo.c. Recommendations: For FFmpeg version 4.2, consider updating to a newer version to mitigate the risk,...

Libav 'av_audio_fifo_size' function null pointer reference vulnerability

Libav formerly FFmpeg is Libav team's set of cross-platform audio and video can be recorded, converted to a solution, which includes a libavcodec encoder. A security vulnerability exists in the 'avaudiofifosize' function in the libavutil/audiofifo.c file in Libav version 12.2. A remote attacker c...

CVE-2017-18247

The avaudiofifosize function in libavutil/audiofifo.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted media file...

FFmpeg 'av_color_primaries_name' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'avcolorprimariesname' function in the libavutil/pixdesc.c file in FFmpeg version 3.3.3. An attacker can exploit this vulnerability to cause a denial ...

Null pointer dereference

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

DEBIAN-CVE-2017-14225

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

UBUNTU-CVE-2017-14225

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

CVE-2017-14225

CVE-2017-14225 affects FFmpeg 3.3.3: the function av_color_primaries_name in libavutil/pixdesc.c may return a NULL pointer depending on file data, leading to a NULL pointer dereference in callers such as avcodec_string and potentially in ffprobe. Impact: remote crash of the application while watc...

CVE-2013-4265

Official data describes a vulnerability in FFmpeg: av_reallocp_array in libavutil/mem.c can cause a NULL pointer dereference due to an incorrect return code handling, with remote attack vectors cited in historical notes. Affected product is FFmpeg prior to 2.0.1; remediation is to upgrade to FFmp...

Updated ffmpeg packages fix several security vulnerabilities

ffmpeg prior to 1.1.5 contains several security vulnerabilities CVE-2013-3671: The formatline function in log.c in libavutil uses inapplicable offset data during a certain category calculation, which allows remote attackers to cause a denial of service invalid pointer dereference and application...

CVE-2013-3671

The formatline function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset data during a certain category calculation, which allows remote attackers to cause a denial of service invalid pointer dereference and application crash via crafted data that triggers a log message...

CVE-2013-3671

CVE-2013-3671 is a FFmpeg vulnerability in which the format_line function in log.c (libavutil) uses inapplicable offset data during a category calculation, enabling a remote attacker to trigger a denial of service via crafted data that triggers a log message. The connected advisories (MGASA-2013-...

CVE-2013-3671

The formatline function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset data during a certain category calculation, which allows remote attackers to cause a denial of service invalid pointer dereference and application crash via crafted data that triggers a log message...