CVE-2025-21006

CVE-2025-21006 describes an out-of-bounds write in the MPEG-4 macroblock handling of the libsavsvc.so library, affecting some Samsung/Android components prior to Android 15. The underlying issue is a memory corruption risk due to improper handling of macro blocks in the MPEG4 codec, allowing a lo...

CVE-2025-21006

Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory...

CVE-2025-21006

Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory...

CVE-2025-21006: Out-of-bounds Write

Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory...

CVE-2018-12459

An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

CVE-2018-12460

libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, leading to a denial of service, related to idctdsp.c and mpegvideo.c...

CVE-2017-13313

In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for...

The vulnerability of the `ff_mpeg4_decode_picture_header` function in the `libavcodec/mpeg4videodec.c` file of the FFmpeg multimedia library, related to insufficient input data validation, allows a attacker to trigger a service failure.

The vulnerability of the ffmpeg4decodepictureheader function in the libavcodec/mpeg4videodec.c file of the FFmpeg multimedia library is related to insufficient input data validation. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a specially created...

The vulnerability of the `ff_mpeg4_decode_picture_header` function in the `libavcodec/mpeg4videodec.c` file of the FFmpeg multimedia library, related to pointer arithmetic errors, allows attackers to cause a denial-of-service attack.

The vulnerability of the ffmpeg4decodepictureheader function in the libavcodec/mpeg4videodec.c file of the FFmpeg multimedia library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created AVI file...

PT-2025-28385 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 15 Description: The issue concerns an out-of-bounds write in the handling of macro blocks for the MPEG4 codec in the libsavsvc.so library. This allows local attackers to write out-of-bounds memory. Recommendations: F...

AtomicParsley: Multiple Vulnerabilities

Background AtomicParsley is a command line program for manipulating iTunes-style metadata in MPEG4 files. Description Multiple vulnerabilities have been discovered in AtomicParsley. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers...

SUSE CVE-2015-7213

Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow...

SUSE CVE-2018-12458

An improper integer type in the mpeg4encodegopheader function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

SUSE CVE-2018-12459

An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

SUSE CVE-2018-13301

In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service...

SUSE CVE-2018-13300

In FFmpeg 3.2 and 4.0.1, an improper argument AVCodecParameters passed to the avprivrequestsample function in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information...

UBUNTU-CVE-2014-125005

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decodevolheader of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix...

CVE-2021-0971

In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

Weak Password Vulnerability in MPEG4 DVRs

The MPEG Motion Picture Experts Group is an ISO/IEC working group that develops international standards for the compression, decompression, processing and coded representation of motion pictures, audio and their combinations. A weak password vulnerability exists in MPEG4 DVR, which can be exploit...