Browse CVEs

HIGH 8.8 CVE-2017-17129 The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and … Libav No fix yet Fix from $1,9502017-12-04 HIGH 8.8 CVE-2017-17130 The ff_free_picture_tables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer… Libav No fix yet Fix from $1,9502017-12-04 MEDIUM 6.5 CVE-2017-17127 The vc1_decode_frame function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and… Libav No fix yet Fix from $1,6002017-12-04 MEDIUM 6.5 CVE-2017-17128 The h264_slice_init function in libavcodec/h264_slice.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and ap… Libav No fix yet Fix from $1,6002017-12-04 HIGH 7.5 CVE-2017-16803 In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, whi… Libav after 11.11 Fix from $1,9502017-11-13 HIGH 7.5 CVE-2017-11684 There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via… Libav No fix yet Fix from $1,9502017-07-27 HIGH 7.5 CVE-2017-9987 There is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav 12.1. A crafted input can lead to a remote denial of… Libav No fix yet Fix from $1,9502017-06-28 CRITICAL 9.8 CVE-2017-9051 libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsv_read_chunk function in libavformat/nsvdec.c. Libav after 12.0 Fix from $2,3002017-05-18 HIGH 7.1 CVE-2017-7206 The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read) or … Libav Mitigation only Fix from $1,9502017-03-21 HIGH 7.1 CVE-2017-7208 The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive … Libav Mitigation only Fix from $1,9502017-03-21 MEDIUM 5.5 CVE-2016-9819 libavcodec/mpegvideo.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative valu… Libav No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2016-9820 libavcodec/mpegvideo_motion.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negati… Libav No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2016-9821 Integer overflow in libavcodec/mpegvideo_parser.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. Libav No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2016-9822 Integer overflow in libavcodec/mpeg12dec.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. Libav No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2016-9823 libavcodec/x86/mpegvideo.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. Libav No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2016-9824 Integer overflow in libswscale/x86/swscale.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. Libav No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2016-9825 libswscale/utils.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. Libav No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2016-9826 libavcodec/ituh263dec.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative val… Libav No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2016-7393 Stack-based buffer overflow in the aac_sync function in aac_parser.c in Libav before 11.5 allows remote attackers to cause a denial of service (out-o… Libav after 11.4 Fix from $1,6002017-02-15 MEDIUM 5.5 CVE-2016-7477 The ff_put_pixels8_xy2_mmx function in rnd_template.c in Libav 11.7 allows remote attackers to cause a denial of service (invalid memory access and c… Libav Mitigation only Fix from $1,6002017-02-15 MEDIUM 5.5 CVE-2016-7499 The sbr_make_f_master function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service (divide-by-zero error and application c… Libav Patch available Fix from $1,6002017-02-15 MEDIUM 5.5 CVE-2016-8675 The get_vlc2 function in get_bits.h in Libav before 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) vi… Libav after 11.8 Fix from $1,6002017-02-15 MEDIUM 5.5 CVE-2016-8676 The get_vlc2 function in get_bits.h in Libav 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a cra… Libav after 11.8 Fix from $1,6002017-02-15 MEDIUM 5.5 CVE-2016-6832 Heap-based buffer overflow in the ff_audio_resample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service … Libav after 11.3 Fix from $1,6002017-02-15 HIGH 10.0 CVE-2014-3984 Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors. Libav after 0.8.11 Fix from $1,9502014-06-06 HIGH 10.0 CVE-2012-2798 Unspecified vulnerability in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4,… Libav after 0.10.4 Fix from $1,9502012-09-10 HIGH 10.0 CVE-2012-2800 Unspecified vulnerability in the ff_ivi_process_empty_tile function in libavcodec/ivi_common.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 an… Libav after 0.10.4 Fix from $1,9502012-09-10 HIGH 10.0 CVE-2012-2801 Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and atta… Libav after 0.10.4 Fix from $1,9502012-09-10 HIGH 10.0 CVE-2012-2802 Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impa… Libav after 0.10.4 Fix from $1,9502012-09-10 HIGH 10.0 CVE-2012-2803 Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x befo… Libav after 0.10.4 Fix from $1,9502012-09-10