CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0CVE-2017-9994
https://notcve.org/view.php?id=CVE-2017-9994
28 Jun 2017 — libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pix_fmt is set, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the vp8_decode_mb_row_no_filter and pred8x8_128_dc_8_c functions. El archivo libavcodec/webp.c en Ffmpeg en sus versiones anteriores a 2.8.12, 3.0.x en sus versiones ... • http://www.securityfocus.com/bid/99317 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 34EXPL: 0CVE-2017-9996
https://notcve.org/view.php?id=CVE-2017-9996
28 Jun 2017 — The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file. La función cdxl_decode_frame del archivo libavcodec/cdxl.c en Ffmpeg 2.8.x en sus versiones anteriores a 2.8.12, 3.0.x en sus versiones an... • http://www.securityfocus.com/bid/99323 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2017-7859
https://notcve.org/view.php?id=CVE-2017-7859
14 Apr 2017 — FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ff_h264_slice_context_init function in libavcodec/h264dec.c. FFmpeg en versiones anteriores a 05-03-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con the ff_h264_slice_context_init function in libavcodec/h264dec.c. • http://www.securityfocus.com/bid/97663 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2017-7862 – Gentoo Linux Security Advisory 201811-19
https://notcve.org/view.php?id=CVE-2017-7862
14 Apr 2017 — FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame function in libavcodec/pictordec.c. FFmpeg en versiones anteriores a 07-02-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con la función decode_frame en libavcodec/pictordec.c Multiple vulnerabilities have been found in Libav, the worst of which may allow a Denial of Service condition. Versions less than 12.3 are aff... • http://www.debian.org/security/2017/dsa-4012 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 0CVE-2017-7863
https://notcve.org/view.php?id=CVE-2017-7863
14 Apr 2017 — FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c. FFmpeg en versiones anteriores a 04-02-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con la función decode_frame_common en libavcodec/pngdec.c • http://www.securityfocus.com/bid/97675 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 33%CPEs: 14EXPL: 1CVE-2016-10190
https://notcve.org/view.php?id=CVE-2016-10190
09 Feb 2017 — Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response. Desbordamiento de búfer basado en memoria dinámica en libavformat/http.c en FFmpeg en versiones anteriores a 2.8.10, 3.0.x en versiones anteriores a 3.0.5, 3.1.x en versiones anteriores a 3.1.6 y 3.2.x en versiones anteriores a 3.2.2 permite a servidores web remotos ejecutar ... • https://github.com/muzalam/FFMPEG-exploit • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 19%CPEs: 14EXPL: 1CVE-2016-10191
https://notcve.org/view.php?id=CVE-2016-10191
09 Feb 2017 — Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches. Desbordamiento de búfer basado en memoria dinámica en libavformat/rtmppkt.c en FFmpeg en versiones anteriores a 2.8.10, 3.0.x en versiones anteriores a 3.0.5, 3.1.x en versiones anteriores a 3.1.6 y 3.2.x en versiones anteriores a 3.2.2 permite a atacantes r... • https://github.com/KaviDk/Heap-Over-Flow-with-CVE-2016-10191 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 9%CPEs: 14EXPL: 0CVE-2016-10192
https://notcve.org/view.php?id=CVE-2016-10192
09 Feb 2017 — Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size. Desbordamiento de búfer basado en memoria dinámica en ffserver.c en FFmpeg en versiones anteriores a 2.8.10, 3.0.x en versiones anteriores a 3.0.5, 3.1.x en versiones anteriores a 3.1.6 y 3.2.x en versiones anteriores a 3.2.2 permite a atacantes remotos ejecutar código arbitrario aprovecha... • http://www.openwall.com/lists/oss-security/2017/01/31/12 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2016-6164
https://notcve.org/view.php?id=CVE-2016-6164
23 Jan 2017 — Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size. Desbordamiento de entero en la función mov_build_index en libavformat/mov.c en FFmpeg en versiones anteriores a 2.8.8, 3.0.x en versiones anteriores a 3.0.3 y 3.1.x en versiones anteriores a 3.1.1 permite a atacantes remotos tener un impacto no especificado a través de vectores que implica... • http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit%3Bh=8a3221cc67a516dfc1700bdae3566ec52c7ee823 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6671
https://notcve.org/view.php?id=CVE-2016-6671
23 Dec 2016 — The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted SWF file. La función raw_decode en libavcodec/rawdec.c en FFmpeg en versiones anteriores a 3.1.2 permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o ejecutar un código arbitrario a través del archivo manipulado SWF. • http://www.openwall.com/lists/oss-security/2016/08/12/6 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •