CVE-2017-9987

There is a heap-based buffer overflow in the function hpelmotion in mpegvideomotion.c in libav 12.1. A crafted input can lead to a remote denial of service attack...

Code injection

libavcodec/mpegvideomotion.c in libav 11.8 allows remote attackers to cause a denial of service crash via vectors involving left shift of a negative value...

CVE-2016-9820

CVE-2016-9820 affects libavcodec/mpegvideo_motion.c in libav 11.8 and earlier, enabling remote attackers to cause a denial of service (crash) through a left-shift of a negative value. The Debian DLA-791-1 advisory indicates fixed in libav version 6:0.8.20-0+deb7u1; upstream details also describe ...