CVSS: 9.8EPSS: 0%CPEs: 57EXPL: 0CVE-2013-0875 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0875
23 Nov 2013 — The ff_add_png_paeth_prediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an out-of-bounds array access. La función ff_add_png_paeth_prediction en libavcodec/pngdec.c de FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto no especificado a través de una imagen PNG manipulada, relacionado con un array de acceso fuera de límites. Multiple vulnerabilities have been found in FFmpe... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=1ac0fa50eff30d413206cffa5f47f7fe6d4849b1 • CWE-189: Numeric Errors •
CVSS: 10.0EPSS: 0%CPEs: 57EXPL: 0CVE-2013-0872 – Gentoo Linux Security Advisory 201603-06
https://notcve.org/view.php?id=CVE-2013-0872
23 Nov 2013 — The swr_init function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or unsupported (1) input or (2) output channel layout, related to an out-of-bounds array access. La función swr_init en libswresample/swresample.c de FFmpeg anterior a la versión 1.1.3 permite a atacantes remotos generar un impacto no especificado a través de (2) entradas o (2) salidas inválidas o sin soporte en el diseño del canal, relacionado con un array de acces... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=21cd905cd44a4bbafe8631bbaa6021d328413ce5 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0854 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0854
11 Nov 2013 — The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data. La función mjpeg_decode_scan_progressive_ac en libavcodec/mjpegdec.c de FFmpeg anterior a la versión 1.1 permite a atacantes remotos llevar a cabo un impacto no especificado a través de datos MJPEG manipulados. Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=1f41cffe1e3e79620f587545bdfcbd7e6e68ed29 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 0%CPEs: 58EXPL: 0CVE-2013-0858 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0858
11 Nov 2013 — The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels. La función atrac3_decode_init en libavcodec/atrac3.c en FFmpeg anteriores a 1.0.4 permite a atacantes remotos tener un impacto no especificado a través de datos ATRAC3 con el modo de coficiación "joint stereo" establecido y menos de dos canales. Several security issues have been corrected in mult... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=13451f5520ce6b0afde861b2285dda659f8d4fb4 •
CVSS: 9.8EPSS: 0%CPEs: 59EXPL: 0CVE-2013-0866 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0866
11 Nov 2013 — The aac_decode_init function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large number of channels in an AAC file, which triggers an out-of-bounds array access. La función aac_decode_init en libavcodec / aacdec.c en FFmpeg anterior a 1.0.4 y 1.1.x anterior a 1.1.2 permite a atacantes remotos tener un impacto no especificado a través de un gran número de canales en un archivo AAC, lo que desencadena un acceso fuera de limites... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=47e462eecc0a47ad40f59376199f93f227e21d13 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0850 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0850
11 Nov 2013 — The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an out-of-bounds array access. La función decode_slice_header en libavcodec/h264.c en FFmpeg anteriores a 1.1 permite a atacantes remotos tener un impacto no especificado a través de datos H.264 manipulados, lo cual lanza un acceso a array fuera de límites. Several security issues have been corrected in multiple demuxers and decoders of the l... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d6c184880ee2e09fd68c0ae217173832cee5afc1 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 57EXPL: 0CVE-2013-0844 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0844
11 Nov 2013 — Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access. Error de off-by-one en la función adpcm_decode_frame en libavcodec/adpcm.c en FFmpeg anteriores a 1.0.4 permite a atacantes remotos tener un impacto no especificado a través de datos DK4 manipulados, lo cual provoca un acceso a array fuera de límites. Several security issues have been correct... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=85a14dbd5dca34320f58b1ba11dd6dd0df4fb3be • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0853 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0853
11 Nov 2013 — The wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error. La función wavpack_decode_frame en libavcodec/wavpack.c en FFmpeg anterior a v1.1 permite a atacantes remotods tener un impacto no especificado a través de información WavPack manipulada, lo que desencadena un acceso fuera de limites en un array, posiblemente debido a u... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=be818df547c3b0ae4fadb50fd210139a8636706a • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 0%CPEs: 55EXPL: 0CVE-2013-0857 – Debian Security Advisory 2793-1
https://notcve.org/view.php?id=CVE-2013-0857
11 Nov 2013 — The decode_frame_ilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted height value in IFF PBM/ILBM bitmap data. La función decode_frame_ilbm en libavcodec/iff.c en FFmpeg anterior a v1.1 permite a atacantes remotos tener un impacto no especificado a través de un valor de altura manipulado en la información de mapa de bits de IFF PBM/ILBM. Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=2fbb37b51bbea891392ad357baf8f3dff00bac05 • CWE-20: Improper Input Validation •
CVSS: 8.8EPSS: 0%CPEs: 51EXPL: 0CVE-2011-3950 – Gentoo Linux Security Advisory 201310-12
https://notcve.org/view.php?id=CVE-2011-3950
25 Oct 2013 — The dirac_decode_data_unit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via a crafted value in the reference pictures number. La función dirac_decode_data_unit en libavcodec/diracdec.c en FFmpeg anterior a v0.10 permite a atacantes remotos tener un impacto no especificado a través de un valor manipulado en el número de referencia de las imágenes. Multiple vulnerabilities were found in FFmpeg, the worst of which might enable remote attackers to... • http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=ddf0c1d86ad8e1df5ab3265206aef493a1bdc813 •