Ffmpeg

Ffmpeg

493 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2011-4352

  • EPSS 4.53%
  • Veröffentlicht 20.08.2012 20:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Integer overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before ...

4.3

CVE-2011-4353

  • EPSS 0.72%
  • Veröffentlicht 20.08.2012 20:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before...

6.8

CVE-2011-4364

  • EPSS 2.94%
  • Veröffentlicht 20.08.2012 20:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers t...

5

CVE-2012-0854

  • EPSS 1.31%
  • Veröffentlicht 20.08.2012 19:55:05
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The dpcm_decode_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors, which trigge...

2.6

CVE-2012-0856

Exploit
  • EPSS 1.14%
  • Veröffentlicht 20.08.2012 19:55:05
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Heap-based buffer overflow in the MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted H263 media file. N...

5

CVE-2012-0857

  • EPSS 0.66%
  • Veröffentlicht 20.08.2012 19:55:05
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service (application crash) via unspecified vectors.

4.3

CVE-2012-0848

  • EPSS 0.91%
  • Veröffentlicht 20.08.2012 19:55:04
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file, related to an incorrect calculation, aka "wrong ...

4.3

CVE-2012-0850

  • EPSS 0.78%
  • Veröffentlicht 20.08.2012 19:55:04
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The sbr_qmf_synthesis function in libavcodec/aacsbr.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted mpg file that triggers memory corruption involving the v_off variable, probably a buff...

4.3

CVE-2012-0847

  • EPSS 0.62%
  • Veröffentlicht 20.08.2012 19:55:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media file.

6.8

CVE-2011-3940

  • EPSS 1.02%
  • Veröffentlicht 20.08.2012 18:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (out-of-bounds read an...