Arbitrary Code Execution

ffmpeg is vulnerable to arbitrary code execution. The vulnerability exists as the avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring...

Null pointer dereference

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

CVE-2017-14225

CVE-2017-14225 affects FFmpeg 3.3.3: the function av_color_primaries_name in libavutil/pixdesc.c may return a NULL pointer depending on file data, leading to a NULL pointer dereference in callers such as avcodec_string and potentially in ffprobe. Impact: remote crash of the application while watc...