Ffmpeg vulnerabilities, page 5
533 vulnerabilities
Known vulnerabilities in Ffmpeg products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
CVE-2013-7016chainguardtorchaudio-ffmpeg-tarballs+4
EPSS score2.48%
The get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the expected sample separation, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.CVE-2013-7012chainguardtorchaudio-ffmpeg-tarballs+4EPSS score1.64%
The get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not prevent attempts to use non-zero image offsets, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.CVE-2013-7014chainguardtorchaudio-ffmpeg-tarballs+4EPSS score1.73%
Integer signedness error in the add_bytes_l2_c function in libavcodec/pngdsp.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted PNG data.CVE-2013-7017chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.28%
libavcodec/jpeg2000.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via crafted JPEG2000 data.CVE-2013-7024chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.48%
The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not consider the component number in certain calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.CVE-2013-7010chainguardtorchaudio-ffmpeg-tarballs+5EPSS score2.67%
Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data.CVE-2013-3675chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.06%
The process_frame_obj function in sanm.c in libavcodec in FFmpeg before 1.2.1 does not validate width and height values, which allows remote attackers to cause a denial of service (integer overflow, out-of-bounds array access, and application crash) via crafted LucasArts Smush video data.CVE-2013-3673chainguardtorchaudio-ffmpeg-tarballs+4EPSS score2.05%
The gif_decode_frame function in gifdec.c in libavcodec in FFmpeg before 1.2.1 does not properly manage the disposal methods of frames, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted GIF data.CVE-2013-3670chainguardtorchaudio-ffmpeg-tarballs+5EPSS score1.36%
The rle_unpack function in vmdav.c in libavcodec in FFmpeg git 20130328 through 20130501 does not properly use the bytestream2 API, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted RLE data. NOTE: the vendor has listed this as an issue fixed in 1.2.1, but the issue is actually in new code that was not shipped with the 1.2.1 release or any earlier release.CVE-2013-3674chainguardtorchaudio-ffmpeg-tarballs+4EPSS score1.96%
The cdg_decode_frame function in cdgraphics.c in libavcodec in FFmpeg before 1.2.1 does not validate the presence of non-header data in a buffer, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted CD Graphics Video data.CVE-2013-3672chainguardtorchaudio-ffmpeg-tarballs+5EPSS score1.36%
The mm_decode_inter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via crafted American Laser Games (ALG) MM Video data.CVE-2013-3671chainguardtorchaudio-ffmpeg-tarballs+4EPSS score1.36%
The format_line function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset data during a certain category calculation, which allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via crafted data that triggers a log message.CVE-2021-38291chainguardtorchaudio-ffmpeg-tarballs+7EPSS score2.69%
FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion failure at src/libavutil/mathematics.c.CVE-2021-38171debianffmpeg+20EPSS score2.41%
adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a necessary step because the second argument to init_get_bits can be crafted.CVE-2021-38090debianffmpeg+2EPSS score1.28%
Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.CVE-2021-38114debianffmpeg+3EPSS score1.03%
libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.CVE-2021-38091debianffmpeg+2EPSS score1.27%
Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.CVE-2021-38093debianffmpeg+2EPSS score1.31%
Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.CVE-2021-38094debianffmpeg+2EPSS score1.29%
Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.CVE-2021-38092debianffmpeg+2EPSS score1.32%
Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.