CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-7562 – Gentoo Linux Security Advisory 201701-71
https://notcve.org/view.php?id=CVE-2016-7562
23 Dec 2016 — The ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (buffer overflow) via a crafted AVI file. La función ff_draw_pc_font en libavcodec/cga_data.c en FFmpeg en versiones anteriores a 3.1.4 permite a atacantes remotos provocar una denegación de servicio (desbordamiento de búfer) a través de un archivo AVI manipulado. Multiple vulnerabilities have been found in FFmpeg, the worst of which may allow remote attackers to cause a Denial o... • http://www.openwall.com/lists/oss-security/2016/10/08/1 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2016-6920 – ffmpeg 3.1.2 Heap Overflow
https://notcve.org/view.php?id=CVE-2016-6920
07 Sep 2016 — Heap-based buffer overflow in the decode_block function in libavcodec/exr.c in FFmpeg before 3.1.3 allows remote attackers to cause a denial of service (application crash) via vectors involving tile positions. Desbordamiento de búfer basado en memoria dinámica en la función decode_block en libavcodec/exr.c en FFmpeg en versiones anteriores a 3.1.3 permite a atacantes provocar una denegación de servicio (caída de la aplicación) a través de vectores que implican posiciones de baldosa. ffmpeg versions 3.1.2 an... • http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit%3Bh=79f52a0dbd484aad111e4bf4a4f7047c7ceb6137 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.5EPSS: 1%CPEs: 7EXPL: 0CVE-2016-2839 – Gentoo Linux Security Advisory 201701-15
https://notcve.org/view.php?id=CVE-2016-2839
05 Aug 2016 — Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav header allocation in FFmpeg 0.10, which allows remote attackers to cause a denial of service (application crash) via a crafted video. Mozilla Firefox en versiones anteriores a 48.0 y Firefox ESR 45.x en versiones anteriores a 45.3 en Linux hace llamadas cairo _cairo_surface_get_extents que no interactúan adecuadamente con asignación de cabecera libav en F... • http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html • CWE-20: Improper Input Validation •
CVSS: 8.8EPSS: 1%CPEs: 4EXPL: 0CVE-2016-3062 – Gentoo Linux Security Advisory 201705-08
https://notcve.org/view.php?id=CVE-2016-3062
15 Jun 2016 — The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via the entries value in a dref box in an MP4 file. La función mov_read_dref en libavformat/mov.c en Libav en versiones anteriores a 11.7 y FFmpeg en versiones anteriores a 0.11 permite a atacantes remotos provocar una denegación de srevicio (corrupción de memoria) o ejecutar código arbitrario a través de valores de ent... • http://lists.opensuse.org/opensuse-updates/2016-06/msg00105.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 1%CPEs: 2EXPL: 0CVE-2016-2329 – Gentoo Linux Security Advisory 201606-09
https://notcve.org/view.php?id=CVE-2016-2329
12 Feb 2016 — libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted TIFF file, related to the tiff_decode_tag and decode_frame functions. libavcodec/tiff.c en FFmpeg en versiones anteriores a 2.8.6 no valida correctamente valores RowsPerStrip y factores de submuestreo de crominancia YCbCr, lo que podría ... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=89f464e9c229006e16f6bb5403c5529fdd0a9edd • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-2328 – Gentoo Linux Security Advisory 201606-09
https://notcve.org/view.php?id=CVE-2016-2328
12 Feb 2016 — libswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denial of service (out-of-bounds array read access) or possibly have unspecified other impact via a crafted .cine file, related to the bayer_to_rgb24_wrapper and bayer_to_yv12_wrapper functions. libswscale/swscale_unscaled.c en FFmpeg en versiones anteriores a 2.8.6 no valida correctamente valores de anchura, lo que podría permitir a atacantes remotos provocar una denegación... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=757248ea3cd917a7755cb15f817a9b1f15578718 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-2327 – Gentoo Linux Security Advisory 201606-09
https://notcve.org/view.php?id=CVE-2016-2327
12 Feb 2016 — libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .avi file, related to the apng_encode_frame and encode_apng functions. libavcodec/pngenc.c en FFmpeg en versiones anteriores a 2.8.5 utiliza tamaños de línea incorrectos en ciertos cálculos de fila, lo que podría permitir a atacantes remotos provocar una denegación de s... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7ec9c5ce8a753175244da971fed9f1e25aef7971 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 5%CPEs: 4EXPL: 0CVE-2016-2326 – Gentoo Linux Security Advisory 201705-08
https://notcve.org/view.php?id=CVE-2016-2326
12 Feb 2016 — Integer overflow in the asf_write_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS (aka presentation timestamp) value in a .mov file. Desbordamiento de entero en la función asf_write_packet en libavformat/asfenc.c en FFmpeg en versiones anteriores a 2.8.5 permite a atacantes remotos provocar una denegación de servicio o posiblemente tener otro impacto no especificado a través de un ... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=7c0b84d89911b2035161f5ef51aafbfcc84aa9e2 • CWE-190: Integer Overflow or Wraparound •
CVSS: 8.8EPSS: 1%CPEs: 2EXPL: 0CVE-2016-2330 – Gentoo Linux Security Advisory 201606-09
https://notcve.org/view.php?id=CVE-2016-2330
12 Feb 2016 — libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .tga file, related to the gif_image_write_image, gif_encode_init, and gif_encode_close functions. libavcodec/gif.c en FFmpeg en versiones anteriores a 2.8.6 no calcula correctamente un tamaño de buffer, lo que podría permitir a atacantes remotos provocar una denegación de servicio (ac... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=03d83ba34b2070878909eae18dfac0f519503777 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-2213 – Gentoo Linux Security Advisory 201606-09
https://notcve.org/view.php?id=CVE-2016-2213
03 Feb 2016 — The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service (out-of-bounds array read access) via crafted JPEG 2000 data. La función jpeg2000_decode_tile en libavcodec/jpeg2000dec.c en FFmpeg en versiones anteriores a 2.8.6 permite a atacantes remotos causar una denegación de servicio (acceso a lectura de array fuera de rango) a través de datos JPEG 2000 manipulados. Multiple vulnerabilities have been found in FFmpeg, the worst of... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=0aada30510d809bccfd539a90ea37b61188f2cb4 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •