2776 matches found
CVE-2016-7477
The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...
CVE-2016-7499
The sbrmakefmaster function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...
CVE-2016-8676
The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...
CVE-2016-8675
CVE-2016-8675 affects Libav: the get_vlc2 function in get_bits.h is vulnerable in Libav versions before 11.9, allowing remote attackers to cause a denial of service via a crafted MP3 file, possibly related to startcode sequences during m4v detection. The issue is documented across multiple source...
CVE-2016-8676
The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...
CVE-2016-8675
The getvlc2 function in getbits.h in Libav before 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file, possibly related to startcode sequences during m4v detection...
CVE-2016-7477
The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...
CVE-2016-8675
The getvlc2 function in getbits.h in Libav before 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file, possibly related to startcode sequences during m4v detection...
CVE-2016-7499
CVE-2016-7499 affects Libav 11.7, specifically the sbr_make_f_master function in libavcodec/aacsbr.c . A crafted MP3 file can trigger a divide-by-zero in this routine, leading to a remote denial of service and application crash. Connected documents corroborate the same description across multiple...
CVE-2016-8676
CVE-2016-8676 affects Libav 11.9: the get_vlc2 function in get_bits.h can be triggered by a crafted MP3 to cause a denial-of-service via a NULL pointer dereference leading to a crash. This vulnerability is described as stemming from an incomplete fix for CVE-2016-8675. The connected documents con...
CVE-2016-8676: NULL Pointer Dereference
The getvlc2 function in getbits.h in Libav 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675...
CVE-2016-7499: Divide By Zero
The sbrmakefmaster function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mp3 file...
CVE-2016-7477: NULL Pointer Dereference
The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...
CVE-2016-8675: NULL Pointer Dereference
The getvlc2 function in getbits.h in Libav before 11.9 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted mp3 file, possibly related to startcode sequences during m4v detection...
PT-2017-9212
Name of the Vulnerable Software and Affected Versions Libav version 11.7 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted mp3 file. This is due to a problem in the sbr make f master function...
PT-2017-9725
Name of the Vulnerable Software and Affected Versions Libav version 11.9 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and crash, via a crafted mp3 file. This problem exists due to an incomplete fix for a previous issue...
PT-2017-9197
Name of the Vulnerable Software and Affected Versions Libav version 11.7 Description The issue allows remote attackers to cause a denial of service, resulting in invalid memory access and a crash, via a crafted mp3 file. This is due to a problem in the ff put pixels8 xy2 mmx function in rnd...
PT-2017-9724
Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.9 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This can be achieved by providing a crafted mp3 file, possibly related to startcod...
CVE-2016-5115
The avcodecdecodeaudio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...
Out-of-bounds
The avcodecdecodeaudio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service out-of-bounds read via a crafted mp3 file...