Browse CVEs

HIGH 10.0 CVE-2013-4265 The av_reallocp_array function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified impact and remote vectors related to a "wrong return code… Ffmpeg after 2.0 Fix from $1,9502013-11-23 HIGH 9.3 CVE-2013-0874 The (1) doubles2str and (2) shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via… Ffmpeg after 1.1.2 Fix from $1,9502013-11-23 HIGH 9.3 CVE-2013-0875 The ff_add_png_paeth_prediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a cr… Ffmpeg after 1.1.2 Fix from $1,9502013-11-23 HIGH 9.3 CVE-2013-0876 Multiple integer overflows in the (1) old_codec37 and (2) old_codec47 functions in libavcodec/sanm.c in FFmpeg before 1.1.3 allow remote attackers to… Ffmpeg after 1.1.2 Fix from $1,9502013-11-23 HIGH 9.3 CVE-2013-0877 The old_codec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted LucasArts Smus… Ffmpeg after 1.1.2 Fix from $1,9502013-11-23 HIGH 9.3 CVE-2013-0878 The advance_line function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted Targa image … Ffmpeg after 1.1.2 Fix from $1,9502013-11-23 HIGH 7.5 CVE-2013-4263 libavfilter in FFmpeg before 2.0.1 has unspecified impact and remote vectors related to a crafted "plane," which triggers an out-of-bounds heap write. Ffmpeg after 2.0 Fix from $1,9502013-11-23 HIGH 7.5 CVE-2013-2495 The iff_read_header function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format (IFF) da… Ffmpeg after 1.1.3 Fix from $1,9502013-03-09 HIGH 7.5 CVE-2013-2496 The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allo… Ffmpeg after 1.1.3 Fix from $1,9502013-03-09 HIGH 7.5 CVE-2013-2276 The avcodec_decode_audio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain … Ffmpeg after 1.1.2 Fix from $1,9502013-02-27 HIGH 7.5 CVE-2013-2277 The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 1.1.3 does not validate the relationship between luma depth… Ffmpeg after 1.1.2 Fix from $1,9502013-02-27 HIGH 10.0 CVE-2011-3937 The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x b… Ffmpeg after 0.9.1 Fix from $1,9502013-01-05 HIGH 10.0 CVE-2012-2797 Unspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unk… Ffmpeg after 0.10.4 Fix from $1,9502012-09-10 HIGH 10.0 CVE-2012-2799 Unspecified vulnerability in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "put bit buffer … Ffmpeg after 0.10.4 Fix from $1,9502012-09-10 HIGH 10.0 CVE-2012-2782 Unspecified vulnerability in the decode_slice_header function in libavcodec/h264.c in FFmpeg before 0.11 has unknown impact and attack vectors, relat… Ffmpeg after 0.10.4 Fix from $1,9502012-09-10 HIGH 10.0 CVE-2012-2783 Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and att… Ffmpeg after 0.10.4 Fix from $1,9502012-09-10 HIGH 10.0 CVE-2012-2785 Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors, related to (1) "som… Ffmpeg after 0.10.4 Fix from $1,9502012-09-10 HIGH 10.0 CVE-2012-2791 Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavco… Ffmpeg after 0.10.4 Fix from $1,9502012-09-10 HIGH 10.0 CVE-2012-2792 Unspecified vulnerability in the decode_init function in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, rel… Ffmpeg after 0.10.4 Fix from $1,9502012-09-10 HIGH 10.0 CVE-2012-2795 Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors related to (1) size … Ffmpeg after 0.10.4 Fix from $1,9502012-09-10 HIGH 10.0 CVE-2012-2796 Unspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impa… Ffmpeg after 0.10.4 Fix from $1,9502012-09-10 MEDIUM 5.0 CVE-2012-2774 The ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corrupti… Ffmpeg after 0.10.4 Fix from $1,6002012-09-10 MEDIUM 5.0 CVE-2012-0855 Heap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a… Ffmpeg after 0.9 Fix from $1,6002012-08-27 MEDIUM 6.8 CVE-2011-3945 The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x bef… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-4364EPSS 5% Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; … Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 5.0 CVE-2012-0854 The dpcm_decode_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows re… Ffmpeg after 0.9 Fix from $1,6002012-08-20 MEDIUM 5.0 CVE-2012-0857 Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a… Ffmpeg after 0.9 Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-3940 nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-3947 Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-3951 The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6,… Ffmpeg after 0.9.1 Fix from $1,6002012-08-20