119 matches found
CVE-2023-50007
FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the avsamplessetsilence function in thelibavutil/samplefmt.c:260:9 component...
CVE-2023-50008
FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the avmalloc function in libavutil/mem.c:105:9 component...
CVE-2023-50007
FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the avsamplessetsilence function in thelibavutil/samplefmt.c:260:9 component...
CVE-2023-51793
Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavutil/imgutils.c:353:9 in imagecopyplane...
CVE-2023-50008
FFmpeg v.n6.1-3-g466799d4f5 is affected by CVE-2023-50008, allowing memory consumption through the colorcorrect filter via av_malloc in libavutil/mem.c:105:9. The vulnerability is tied to FFmpeg’s memory allocation path; no exploit status is provided in the documents. Connected sources cite FFmpe...
CVE-2023-50007
FFmpeg vulnerability CVE-2023-50007 affects the av_samples_set_silence parameter handling in libavutil/samplefmt.c:260:9. Public mentions from multiple sources (Debian security advisory DSA-5985-1 and Astra Linux bulletin) confirm FFmpeg v.n6.1-3-g466799d4f5 is vulnerable and indicate remediation...
CVE-2023-50008
FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the avmalloc function in libavutil/mem.c:105:9 component...
CVE-2023-50007
FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the avsamplessetsilence function in thelibavutil/samplefmt.c:260:9 component...
The vulnerability of the `av_timecode_make_string` function in the `libavutil/timecode.c` file of the FFmpeg multimedia library allows a hacker to cause a service failure.
The vulnerability of the avtimecodemakestring function in the libavutil/timecode.c file of the FFmpeg multimedia library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created .mov file...
PT-2023-9358 · FFmpeg +4 · Ffmpeg +4
Name of the Vulnerable Software and Affected Versions: Ffmpeg version v.n6.1-3-g466799d4f5 Description: The issue is related to a buffer overflow in the av malloc function, located in the libavutil/mem.c component of the Ffmpeg library. This buffer overflow is caused by copying without checking t...
DEBIAN-CVE-2021-28429
Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...
UBUNTU-CVE-2021-28429
Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...
CVE-2021-28429
Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...
CVE-2021-28429
Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...
SUSE CVE-2020-22043
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifoalloccommon function in libavutil/fifo.c...
SUSE CVE-2020-22046
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avprivfloatdspallocl function in libavutil/floatdsp.c...
The vulnerability of the `avpriv_float_dsp_allocl` function in the `libavutil/float_dsp.c` component of the FFmpeg multimedia library allows a attacker to cause a service failure.
The vulnerability of the avprivfloatdspallocl function in the libavutil/floatdsp.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause service failure...
Debian DSA-5126-1 : ffmpeg - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dsa-5126 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc. The descriptive text and...
Remote Code Execution (RCE)
ffmpeg is vulnerable to remote code execution. The vulnerability exists due to a heap-use-after-free in the avfreep function in libavutil/mem.c which allows an attacker to inject and execute malicious codes...
