FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg Ffmpeg team. A security vulnerability exists in FFmpeg, which originates from an assertion failure at src/libavutil/mathematics.c. The vulnerability is caused by the use of the following code:...

DEBIAN-CVE-2020-21688

A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...

CVE-2020-21688

A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...

UBUNTU-CVE-2020-21688

A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...

FFmpeg 资源管理错误漏洞

FFmpeg is a set of open source computer programs that can be used to record, convert, and stream digital audio and video under the LGPL or GPL license. avfreep function in libavutil/mem.c in FFmpeg version 4.2 is vulnerable to a heap-release post-reuse vulnerability. An attacker can exploit this...

FFmpeg Denial of Service Vulnerability (CNVD-2021-40485)

FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg due to a memory leak in the avpriv float dsp allocl function in libavutil float dsp.c. An attacker could use this vulnerability to cause a denial of service attack. The...

DEBIAN-CVE-2020-22046

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avprivfloatdspallocl function in libavutil/floatdsp.c...

CVE-2020-22046

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avprivfloatdspallocl function in libavutil/floatdsp.c...

Design/Logic Flaw

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avprivfloatdspallocl function in libavutil/floatdsp.c...

UBUNTU-CVE-2020-22046

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avprivfloatdspallocl function in libavutil/floatdsp.c...

FFmpeg Denial of Service Vulnerability (CNVD-2021-42351)

FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg, which originates from a memory leak in the fifoalloccommon function in libavutil/fifo.c. The vulnerability can be exploited to cause a denial of service. An attacker c...

CVE-2020-22043

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifoalloccommon function in libavutil/fifo.c...

DEBIAN-CVE-2020-22043

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifoalloccommon function in libavutil/fifo.c...

CVE-2020-22043

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifoalloccommon function in libavutil/fifo.c...

CVE-2020-22043

CVE-2020-22043 is a Denial of Service vulnerability in FFmpeg 4.2 caused by a memory leak in libavutil/fifo.c (fifo_alloc_common). Connected advisories confirm the issue affects FFmpeg 4.2 and have been fixed in OpenSUSE/SUSE advisories (SUSE-SU-2021:2322-1) and Ubuntu USN-6430-1, indicating a pa...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg, which originates from a memory leak in the fifoalloccommon function in libavutil/fifo.c. The vulnerability can be exploited to cause a denial of service. An attacker c...

Arbitrary Code Execution

ffmpeg is vulnerable to arbitrary code execution. The vulnerability exists as the avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring...

CVE-2014-4609

Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...

DEBIAN-CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

UBUNTU-CVE-2014-4609

Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...