CVE-2026-125199

FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...

CVE-2026-125199 FFmpeg through 9.0.2 Memory Leak in VC-1 Decoder via vc1_decode_frame()

FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...

CVE-2026-125199

FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...

EUVD-2026-120288

FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...

CVE-2026-125199: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1_decode_frame() in libavcodec/vc1dec.c that leaks slice…

FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1decodeframe in libavcodec/vc1dec.c that leaks slice buffers when initgetbits8 fails. Attackers can supply crafted files with repeated oversized VC-1 slices exceeding the bit reader limit to exhaust memory of decoding applications...

EUVD-2012-2776

Malware in sbrugna...

EUVD-2017-8293

Malware in sbrugna...

ffmpeg:ffmpeg_AV_CODEC_ID_WMV3_fuzzer: Heap-buffer-overflow in ff_print_debug_info2

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5140494328922112 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDWMV3fuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2018-19130

CVE-2018-19130 corresponds to an invalid memory access in Libav 12.3’s vc1_decode_frame function (libavcodec/vc1dec.c) that can cause denial-of-service via a crafted AAC file. Connected sources (e.g., Debian DLA-2021-1 and CNVD CNVD-2019-09086) identify CVE-2018-19130 as a duplicate of CVE-2017-1...

CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

CVE-2018-19130: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

Libav vc1_decode_frame function denial of service vulnerability

Libav is an open source audio and video processing tools , providing for conversion , manipulation and streaming of various multimedia formats and protocols cross-platform tools and libraries . A denial of service vulnerability exists in the vc1decodeframe function in libavcodec/vc1dec.c in Libav...

CVE-2017-17127

The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2017-17127

The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2017-17127

CVE-2017-17127 affects Libav (vc1_decode_frame in libavcodec/vc1dec.c) and allows a remote attacker to trigger a denial of service via a crafted file, caused by a NULL pointer dereference in Libav 12.2. The impact is an application crash (availability impact). Connected advisories indicate the is...

CVE-2017-17127

The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2017-17127

The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2017-17127: NULL Pointer Dereference

The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2012-2796

Unspecified vulnerability in the vc1decodeframe function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to inconsistencies in "coded slice positions and interlacing" that trigger "out of array writes."...

Design/Logic Flaw

Unspecified vulnerability in the vc1decodeframe function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to inconsistencies in "coded slice positions and interlacing" that trigger "out of array writes."...