54 matches found
JLSEC-2025-121 An issue was discovered in the FFmpeg package, where `vp3_decode_frame` in `libavcodec/vp3.c` lacks...
An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability...
PT-2025-45911
An issue was discovered in the FFmpeg package, where vp3 decode frame in libavcodec/vp3.c lacks check of the return value of av malloc and will cause a null pointer dereference, impacting availability...
EUVD-2009-4596
Malware in sbrugna...
EUVD-2011-4283
Malware in sbrugna...
CVE-2011-4352
Integer overflow in the vp3dequant function in the VP3 decoder vp3.c in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of...
OESA-2024-1806 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: adtsdecodeextradata in...
OESA-2024-1808 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: adtsdecodeextradata in...
OESA-2024-1807 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: adtsdecodeextradata in...
OESA-2024-1804 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: adtsdecodeextradata in...
libavcodec/vp3 Heap Buffer Overflow DoS
The vulnerability of the vp3decodeframe function in the libavcodec/vp3.c component of the FFmpeg multimedia library is related to the lack of checking for the return value of the avmalloc function. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
SUSE CVE-2022-3109
An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability...
UBUNTU-CVE-2022-3109
An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability...
FFmpeg code-related vulnerabilities
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. FFmpeg has a code issue vulnerability that stems from the vp3decodeframe function in its libavcodec/vp3.c file that does not reasonably check the return result of the avmalloc function, whi...
CVE-2022-3109: NULL Pointer Dereference
An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability...
CVE-2022-3109
An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability...
CVE-2022-3109
An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability...
ffmpeg:ffmpeg_AV_CODEC_ID_VP3_fuzzer: Crash in ff_emu_edge_vfix12_mmx
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4801592127258624 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVP3fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000105670d17...
PT-2022-6793 · FFmpeg +5 · Ffmpeg +5
Name of the Vulnerable Software and Affected Versions: FFmpeg versions prior to 3.0 Description: An issue was discovered in the FFmpeg package, where the vp3 decode frame function in libavcodec/vp3.c lacks a check of the return value of av malloc, which will cause a null pointer dereference. This...
ffmpeg:ffmpeg_AV_CODEC_ID_VP3_fuzzer: Crash in ff_put_pixels8_mmx
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4599568176644096 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVP3fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001047fe4c0...
PT-2017-5442
Name of the Vulnerable Software and Affected Versions: FFmpeg version 1.1.4 Description: The issue is related to the vp3 decode frame function, which incorrectly moves threads check out of header packet type check. Recommendations: For FFmpeg version 1.1.4, consider updating to a newer version th...