Libav 'av_audio_fifo_size' function null pointer reference vulnerability

Libav formerly FFmpeg is Libav team's set of cross-platform audio and video can be recorded, converted to a solution, which includes a libavcodec encoder. A security vulnerability exists in the 'avaudiofifosize' function in the libavutil/audiofifo.c file in Libav version 12.2. A remote attacker c...

CVE-2017-18247

The avaudiofifosize function in libavutil/audiofifo.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted media file...

FFmpeg 'av_color_primaries_name' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'avcolorprimariesname' function in the libavutil/pixdesc.c file in FFmpeg version 3.3.3. An attacker can exploit this vulnerability to cause a denial ...

UBUNTU-CVE-2017-14225

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

Null pointer dereference

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

DEBIAN-CVE-2017-14225

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

CVE-2017-14225

CVE-2017-14225 affects FFmpeg 3.3.3: the function av_color_primaries_name in libavutil/pixdesc.c may return a NULL pointer depending on file data, leading to a NULL pointer dereference in callers such as avcodec_string and potentially in ffprobe. Impact: remote crash of the application while watc...

CVE-2017-14225

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

PT-2017-13305

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue arises from the av color primaries name function in libavutil/pixdesc.c, which may return a NULL pointer based on a value in a file. However, callers of this function, such as avcodec string in...

CVE-2017-14225: NULL Pointer Dereference

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

PT-2016-7337

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 3.1.4 Description The issue arises from the ff log2 16bit c function in libavutil/intmath.h when decoding a malformed AIFF file, leading to out-of-bounds memory reading. Recommendations For versions prior to 3.1.4,...

CVE-2016-7450: Out-of-bounds Read

The fflog216bitc function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file...

PT-2020-7679

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 0.10.14 FFmpeg versions 1.1.x prior to 1.1.12 FFmpeg versions 1.2.x prior to 1.2.7 FFmpeg versions 2.0.x prior to 2.0.5 FFmpeg versions 2.1.x prior to 2.1.5 FFmpeg versions 2.2.x prior to 2.2.4 Description The issue is...

CVE-2013-4265

Official data describes a vulnerability in FFmpeg: av_reallocp_array in libavutil/mem.c can cause a NULL pointer dereference due to an incorrect return code handling, with remote attack vectors cited in historical notes. Affected product is FFmpeg prior to 2.0.1; remediation is to upgrade to FFmp...

PT-2013-4926

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.0.1 Description The issue is related to the av reallocp array function in libavutil/mem.c, which has an unspecified impact and remote vectors related to a "wrong return code" and a resultant NULL pointer dereference...

CVE-2013-4265: Undefined Security Weakness

The avreallocparray function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified impact and remote vectors related to a "wrong return code" and a resultant NULL pointer dereference...

Updated ffmpeg packages fix several security vulnerabilities

ffmpeg prior to 1.1.5 contains several security vulnerabilities CVE-2013-3671: The formatline function in log.c in libavutil uses inapplicable offset data during a certain category calculation, which allows remote attackers to cause a denial of service invalid pointer dereference and application...

CVE-2013-3671

The formatline function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset data during a certain category calculation, which allows remote attackers to cause a denial of service invalid pointer dereference and application crash via crafted data that triggers a log message...

CVE-2013-3671

CVE-2013-3671 is a FFmpeg vulnerability in which the format_line function in log.c (libavutil) uses inapplicable offset data during a category calculation, enabling a remote attacker to trigger a denial of service via crafted data that triggers a log message. The connected advisories (MGASA-2013-...

CVE-2013-3671

The formatline function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset data during a certain category calculation, which allows remote attackers to cause a denial of service invalid pointer dereference and application crash via crafted data that triggers a log message...