Vulnerability index

Browse CVEs

332 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ffmpeg HIGH 10.0
CVE-2013-4265

The av_reallocp_array function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified impact and remote vectors related to a "wrong return code…

Fix: after 2.0
Fix from $1,950 2013-11-23
Ffmpeg HIGH 9.3
CVE-2013-0874

The (1) doubles2str and (2) shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via…

Fix: after 1.1.2
Fix from $1,950 2013-11-23
Ffmpeg HIGH 9.3
CVE-2013-0875

The ff_add_png_paeth_prediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a cr…

Fix: after 1.1.2
Fix from $1,950 2013-11-23
Ffmpeg HIGH 9.3
CVE-2013-0876

Multiple integer overflows in the (1) old_codec37 and (2) old_codec47 functions in libavcodec/sanm.c in FFmpeg before 1.1.3 allow remote attackers to…

Fix: after 1.1.2
Fix from $1,950 2013-11-23
Ffmpeg HIGH 9.3
CVE-2013-0877

The old_codec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted LucasArts Smus…

Fix: after 1.1.2
Fix from $1,950 2013-11-23
Ffmpeg HIGH 9.3
CVE-2013-0878

The advance_line function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted Targa image …

Fix: after 1.1.2
Fix from $1,950 2013-11-23
Ffmpeg HIGH 7.5
CVE-2013-4263

libavfilter in FFmpeg before 2.0.1 has unspecified impact and remote vectors related to a crafted "plane," which triggers an out-of-bounds heap write.

Fix: after 2.0
Fix from $1,950 2013-11-23
Ffmpeg HIGH 7.5
CVE-2013-2495

The iff_read_header function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format (IFF) da…

Fix: after 1.1.3
Fix from $1,950 2013-03-09
Ffmpeg HIGH 7.5
CVE-2013-2496

The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allo…

Fix: after 1.1.3
Fix from $1,950 2013-03-09
Ffmpeg HIGH 7.5
CVE-2013-2276

The avcodec_decode_audio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain …

Fix: after 1.1.2
Fix from $1,950 2013-02-27
Ffmpeg HIGH 7.5
CVE-2013-2277

The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 1.1.3 does not validate the relationship between luma depth…

Fix: after 1.1.2
Fix from $1,950 2013-02-27
Ffmpeg HIGH 10.0
CVE-2011-3937

The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x b…

Fix: after 0.9.1
Fix from $1,950 2013-01-05
Ffmpeg HIGH 10.0
CVE-2012-2797

Unspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unk…

Fix: after 0.10.4
Fix from $1,950 2012-09-10
Ffmpeg HIGH 10.0
CVE-2012-2799

Unspecified vulnerability in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "put bit buffer …

Fix: after 0.10.4
Fix from $1,950 2012-09-10
Ffmpeg HIGH 10.0
CVE-2012-2782

Unspecified vulnerability in the decode_slice_header function in libavcodec/h264.c in FFmpeg before 0.11 has unknown impact and attack vectors, relat…

Fix: after 0.10.4
Fix from $1,950 2012-09-10
Ffmpeg HIGH 10.0
CVE-2012-2783

Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and att…

Fix: after 0.10.4
Fix from $1,950 2012-09-10
Ffmpeg HIGH 10.0
CVE-2012-2785

Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors, related to (1) "som…

Fix: after 0.10.4
Fix from $1,950 2012-09-10
Ffmpeg HIGH 10.0
CVE-2012-2791

Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavco…

Fix: after 0.10.4
Fix from $1,950 2012-09-10
Ffmpeg HIGH 10.0
CVE-2012-2792

Unspecified vulnerability in the decode_init function in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, rel…

Fix: after 0.10.4
Fix from $1,950 2012-09-10
Ffmpeg HIGH 10.0
CVE-2012-2795

Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors related to (1) size …

Fix: after 0.10.4
Fix from $1,950 2012-09-10
Ffmpeg HIGH 10.0
CVE-2012-2796

Unspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impa…

Fix: after 0.10.4
Fix from $1,950 2012-09-10
Ffmpeg MEDIUM 5.0
CVE-2012-2774

The ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corrupti…

Fix: after 0.10.4
Fix from $1,600 2012-09-10
Ffmpeg MEDIUM 5.0
CVE-2012-0855

Heap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a…

Fix: after 0.9
Fix from $1,600 2012-08-27
Ffmpeg MEDIUM 6.8
CVE-2011-3945

The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x bef…

Mitigation only
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 6.8
CVE-2011-4364EPSS 5%

Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; …

Mitigation only
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 5.0
CVE-2012-0854

The dpcm_decode_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows re…

Fix: after 0.9
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 5.0
CVE-2012-0857

Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a…

Fix: after 0.9
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 6.8
CVE-2011-3940

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5…

Mitigation only
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 6.8
CVE-2011-3947

Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6…

Mitigation only
Fix from $1,600 2012-08-20
Ffmpeg MEDIUM 6.8
CVE-2011-3951

The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6,…

Fix: after 0.9.1
Fix from $1,600 2012-08-20