Ffmpeg

Ffmpeg

489 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2011-3946

  • EPSS 0.58%
  • Veröffentlicht 09.12.2013 16:35:44
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement information (SEI) data, which triggers an infinite loop.

6.8

CVE-2011-3944

  • EPSS 0.66%
  • Veröffentlicht 09.12.2013 16:35:18
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Smacker data.

7.5

CVE-2011-3941

  • EPSS 0.62%
  • Veröffentlicht 09.12.2013 16:34:56
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bounds write.

6.8

CVE-2011-3935

  • EPSS 0.58%
  • Veröffentlicht 09.12.2013 16:34:28
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to a crafted image size.

6.8

CVE-2011-3934

  • EPSS 0.58%
  • Veröffentlicht 09.12.2013 16:34:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data.

9.3

CVE-2013-0859

  • EPSS 0.54%
  • Veröffentlicht 07.12.2013 21:55:10
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The add_doubles_metadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array access.

9.3

CVE-2013-0844

  • EPSS 0.77%
  • Veröffentlicht 07.12.2013 21:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access.

9.3

CVE-2013-0845

  • EPSS 0.88%
  • Veröffentlicht 07.12.2013 21:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

libavcodec/alsdec.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via a crafted block length, which triggers an out-of-bounds write.

9.3

CVE-2013-0846

  • EPSS 0.94%
  • Veröffentlicht 07.12.2013 21:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access.

9.3

CVE-2013-0847

  • EPSS 0.71%
  • Veröffentlicht 07.12.2013 21:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an out-of-bounds array access.