Ffmpeg vulnerabilities, page 4
533 vulnerabilities
Known vulnerabilities in Ffmpeg products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
CVE-2013-0849chainguardtorchaudio-ffmpeg-tarballs+5
EPSS score3.12%
The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted (1) width or (2) height dimension that is not a multiple of sixteen in id RoQ video data.CVE-2013-0864chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.84%
The gif_copy_img_rect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "end pointer," which allows remote attackers to have an unspecified impact via crafted GIF data that triggers an out-of-bounds array access.CVE-2013-0844chainguardtorchaudio-ffmpeg-tarballs+5EPSS score2.45%
Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access.CVE-2013-0866chainguardtorchaudio-ffmpeg-tarballs+4EPSS score3.62%
The aac_decode_init function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large number of channels in an AAC file, which triggers an out-of-bounds array access.CVE-2013-0869chainguardtorchaudio-ffmpeg-tarballs+5EPSS score2.11%
The field_end function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access.CVE-2013-4263chainguardtorchaudio-ffmpeg-tarballs+4EPSS score1.33%
libavfilter in FFmpeg before 2.0.1 has unspecified impact and remote vectors related to a crafted "plane," which triggers an out-of-bounds heap write.CVE-2013-4265chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.50%
The av_reallocp_array function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified impact and remote vectors related to a "wrong return code" and a resultant NULL pointer dereference.CVE-2013-4264chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.18%
The kempf_decode_tile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote attackers to cause a denial of service (out-of-bounds heap write) via a G2M4 encoded file.CVE-2013-4358ffmpegffmpegEPSS score1.28%
libavcodec/h264.c in FFmpeg before 0.11.4 allows remote attackers to cause a denial of service (crash) via vectors related to alternating bit depths in H.264 data.CVE-2013-7023chainguardtorchaudio-ffmpeg-tarballs+4EPSS score1.64%
The ff_combine_frame function in libavcodec/parser.c in FFmpeg before 2.1 does not properly handle certain memory-allocation errors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data.CVE-2013-7009chainguardtorchaudio-ffmpeg-tarballs+5EPSS score1.64%
The rpza_decode_stream function in libavcodec/rpza.c in FFmpeg before 2.1 does not properly maintain a pointer to pixel data, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Apple RPZA data.CVE-2013-7013chainguardtorchaudio-ffmpeg-tarballs+4EPSS score1.64%
The g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 uses an incorrect ordering of arithmetic operations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Go2Webinar data.CVE-2013-7011chainguardtorchaudio-ffmpeg-tarballs+5EPSS score1.64%
The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not prevent changes to global parameters, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted FFV1 data.CVE-2013-7019chainguardtorchaudio-ffmpeg-tarballs+4EPSS score1.64%
The get_cox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not properly validate the reduction factor, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.CVE-2013-7018chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.48%
libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use of valid code-block dimension values, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.CVE-2013-7015chainguardtorchaudio-ffmpeg-tarballs+5EPSS score2.56%
The flashsv_decode_frame function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly validate a certain height value, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Flash Screen Video data.CVE-2013-7020chainguardtorchaudio-ffmpeg-tarballs+7EPSS score1.68%
The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce certain bit-count and colorspace constraints, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted FFV1 data.CVE-2013-7021chainguardtorchaudio-ffmpeg-tarballs+4EPSS score1.64%
The filter_frame function in libavfilter/vf_fps.c in FFmpeg before 2.1 does not properly ensure the availability of FIFO content, which allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact via crafted data.CVE-2013-7022chainguardtorchaudio-ffmpeg-tarballs+4EPSS score1.64%
The g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 does not properly allocate memory for tiles, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Go2Webinar data.CVE-2013-7008chainguardtorchaudio-ffmpeg-tarballs+4EPSS score1.64%
The decode_slice_header function in libavcodec/h264.c in FFmpeg before 2.1 incorrectly relies on a certain droppable field, which allows remote attackers to cause a denial of service (deadlock) or possibly have unspecified other impact via crafted H.264 data.