Ffmpeg

Ffmpeg

548 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2011-3944

  • EPSS 2.38%
  • Veröffentlicht 09.12.2013 16:35:18
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The smacker_decode_header_tree function in libavcodec/smacker.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Smacker data.

7.5

CVE-2011-3941

  • EPSS 2.27%
  • Veröffentlicht 09.12.2013 16:34:56
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bounds write.

6.8

CVE-2011-3935

  • EPSS 2.04%
  • Veröffentlicht 09.12.2013 16:34:28
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to a crafted image size.

6.8

CVE-2011-3934

  • EPSS 2.05%
  • Veröffentlicht 09.12.2013 16:34:00
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data.

9.3

CVE-2013-0859

  • EPSS 2.12%
  • Veröffentlicht 07.12.2013 21:55:10
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The add_doubles_metadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array access.

9.3

CVE-2013-0844

  • EPSS 2.45%
  • Veröffentlicht 07.12.2013 21:55:09
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access.

9.3

CVE-2013-0845

  • EPSS 3.62%
  • Veröffentlicht 07.12.2013 21:55:09
  • Zuletzt bearbeitet 29.04.2026 01:13:23

libavcodec/alsdec.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via a crafted block length, which triggers an out-of-bounds write.

9.3

CVE-2013-0846

  • EPSS 3.12%
  • Veröffentlicht 07.12.2013 21:55:09
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access.

9.3

CVE-2013-0847

  • EPSS 1.87%
  • Veröffentlicht 07.12.2013 21:55:09
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an out-of-bounds array access.

9.3

CVE-2013-0848

  • EPSS 2.45%
  • Veröffentlicht 07.12.2013 21:55:09
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-...