FFmpeg libavcodec MPEGMPEG4 Buffer Overflow DoS

The vulnerability of the ffmpeg4decodepictureheader function in the libavcodec/mpeg4videodec.c file of the FFmpeg multimedia library is related to insufficient input data validation. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a specially created...

SUSE CVE-2018-13301

In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...

PT-2019-4945

Name of the Vulnerable Software and Affected Versions FFmpeg versions 4.0 through 4.0.3 FFmpeg versions 4.1 through 4.1.1 Description The issue is related to the studio profile decoder in the libavcodec/mpeg4videodec.c file, which allows remote attackers to cause a denial of service or possibly...

PT-2018-4003

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.0.1 Description The issue is related to the ff mpeg4 decode picture header function in the libavcodec/mpeg4videodec.c component of the FFmpeg multimedia library. It is caused by a missing check of a profile value...

PT-2018-4004

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.0 Description The issue is related to an inconsistent bits-per-sample value in the ff mpeg4 decode picture header function, which may trigger an assertion violation when converting a crafted AVI file to MPEG4. This can lead to...