Ffmpeg vulnerabilities, page 2
533 vulnerabilities
Known vulnerabilities in Ffmpeg products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
CVE-2018-6392chainguardtorchaudio-ffmpeg-tarballs+7
EPSS score1.63%
The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service (out-of-array access) via a crafted MP4 file.CVE-2018-6621chainguardtorchaudio-ffmpeg-tarballs+7EPSS score2.16%
The decode_frame function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file.CVE-2018-6912chainguardtorchaudio-ffmpeg-tarballs+5EPSS score1.49%
The decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file.CVE-2018-12458debianffmpeg+3EPSS score1.53%
An improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service.CVE-2018-12459debianffmpeg+1EPSS score1.06%
An inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service.CVE-2018-12460ffmpegffmpegEPSS score1.06%
libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, leading to a denial of service, related to idctdsp.c and mpegvideo.c.CVE-2013-2276chainguardtorchaudio-ffmpeg-tarballs+4EPSS score1.39%
The avcodec_decode_audio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain skip operations, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted audio data.CVE-2013-2277chainguardtorchaudio-ffmpeg-tarballs+5EPSS score1.99%
The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 1.1.3 does not validate the relationship between luma depth and chroma depth, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted H.264 data.CVE-2013-2495chainguardtorchaudio-ffmpeg-tarballs+5EPSS score1.37%
The iff_read_header function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format (IFF) data during operations involving a CMAP chunk or a video codec, which allows remote attackers to cause a denial of service (integer overflow, out-of-bounds array access, and application crash) or possibly have unspecified other impact via a crafted header.CVE-2013-2496chainguardtorchaudio-ffmpeg-tarballs+5EPSS score1.37%
The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted Microsoft RLE data.CVE-2013-0870ffmpegffmpegEPSS score1.48%
The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check.CVE-2013-0874chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.45%
The (1) doubles2str and (2) shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via a crafted TIFF image, related to an out-of-bounds array access.CVE-2013-0894chainguardtorchaudio-ffmpeg-tarballs+8EPSS score1.70%
Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size.CVE-2013-0854chainguardtorchaudio-ffmpeg-tarballs+5EPSS score3.12%
The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data.CVE-2013-0846chainguardtorchaudio-ffmpeg-tarballs+5EPSS score3.12%
Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access.CVE-2013-0872chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.84%
The swr_init function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or unsupported (1) input or (2) output channel layout, related to an out-of-bounds array access.CVE-2013-0877chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.45%
The old_codec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted LucasArts Smush data that has a large size when decoded, related to an out-of-bounds array access.CVE-2013-0861chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.26%
The avcodec_decode_audio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 allows remote attackers to trigger memory corruption via vectors related to the channel layout.CVE-2013-0860chainguardtorchaudio-ffmpeg-tarballs+5EPSS score2.26%
The ff_er_frame_end function in libavcodec/error_resilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to trigger a NULL pointer dereference via crafted picture data.CVE-2013-0863chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.32%
Buffer overflow in the rle_decode function in libavcodec/sanm.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via crafted LucasArts Smush video data.