CVE-2013-3673
- EPSS 2.05%
- Veröffentlicht 10.06.2013 03:19:55
- Zuletzt bearbeitet 29.04.2026 01:13:23
The gif_decode_frame function in gifdec.c in libavcodec in FFmpeg before 1.2.1 does not properly manage the disposal methods of frames, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via ...
CVE-2013-3674
- EPSS 1.96%
- Veröffentlicht 10.06.2013 03:19:55
- Zuletzt bearbeitet 29.04.2026 01:13:23
The cdg_decode_frame function in cdgraphics.c in libavcodec in FFmpeg before 1.2.1 does not validate the presence of non-header data in a buffer, which allows remote attackers to cause a denial of service (out-of-bounds array access and application c...
CVE-2013-3675
- EPSS 2.06%
- Veröffentlicht 10.06.2013 03:19:55
- Zuletzt bearbeitet 29.04.2026 01:13:23
The process_frame_obj function in sanm.c in libavcodec in FFmpeg before 1.2.1 does not validate width and height values, which allows remote attackers to cause a denial of service (integer overflow, out-of-bounds array access, and application crash) ...
CVE-2013-3670
- EPSS 1.36%
- Veröffentlicht 10.06.2013 03:19:54
- Zuletzt bearbeitet 29.04.2026 01:13:23
The rle_unpack function in vmdav.c in libavcodec in FFmpeg git 20130328 through 20130501 does not properly use the bytestream2 API, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) via craf...
CVE-2013-3671
- EPSS 1.36%
- Veröffentlicht 10.06.2013 03:19:54
- Zuletzt bearbeitet 29.04.2026 01:13:23
The format_line function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset data during a certain category calculation, which allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) ...
CVE-2013-3672
- EPSS 1.36%
- Veröffentlicht 10.06.2013 03:19:54
- Zuletzt bearbeitet 29.04.2026 01:13:23
The mm_decode_inter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service (out-of-bounds array acces...
CVE-2013-2495
- EPSS 1.37%
- Veröffentlicht 09.03.2013 11:55:01
- Zuletzt bearbeitet 29.04.2026 01:13:23
The iff_read_header function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format (IFF) data during operations involving a CMAP chunk or a video codec, which allows remote attackers to cause ...
CVE-2013-2496
- EPSS 1.37%
- Veröffentlicht 09.03.2013 11:55:01
- Zuletzt bearbeitet 29.04.2026 01:13:23
The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) o...
CVE-2013-2276
- EPSS 1.39%
- Veröffentlicht 27.02.2013 16:55:02
- Zuletzt bearbeitet 29.04.2026 01:13:23
The avcodec_decode_audio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain skip operations, which allows remote attackers to cause a denial of service (out-of-bounds array acce...
CVE-2013-2277
- EPSS 1.99%
- Veröffentlicht 27.02.2013 16:55:02
- Zuletzt bearbeitet 29.04.2026 01:13:23
The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 1.1.3 does not validate the relationship between luma depth and chroma depth, which allows remote attackers to cause a denial of service (out-of-bounds array ac...