CRITICAL9.8CVE-2016-10192Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows rem… from 0, < 2.8.11-r0
CRITICAL9.8CVE-2016-10191Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2… from 0, < 2.8.11-r0
CRITICAL9.8CVE-2016-10190Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 al… from 0, < 2.8.11-r0
CRITICAL9.8Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 all…
from 0, < 2.8.11-r0
HIGH8.8The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-parameter-sets values, w…
from 0, < 3.1.11-r0
HIGH8.8The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a f…
from 0, < 3.1.11-r0
HIGH8.8In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, an integer signedness error might occur when a crafted…
from 0, < 3.1.11-r0
HIGH8.8Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8,…
from 0, < 3.1.8-r0
HIGH8.8An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for…
from 0, < 3.0.7-r0
HIGH8.8libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of servi…
from 0, < 2.8.11-r0
HIGH8.8libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which al…
from 0, < 2.8.11-r0
HIGH8.8libswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a deni…
from 0, < 2.8.11-r0
HIGH7.8The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service…
from 0, < 3.1.10-r0
HIGH7.8ffmpeg - security update
from 0, < 3.1.10-r0
HIGH7.8The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2…
from 0, < 3.1.8-r0
HIGH7.8libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensu…
from 0, < 3.1.8-r0
HIGH7.8Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x befor…
from 0, < 3.1.8-r0
HIGH7.8The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding wi…
from 0, < 2.8.11-r0
HIGH7.8The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a…
from 0, < 2.8.11-r0
HIGH7.5The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segme…
from 0, < 3.1.10-r0
HIGH7.5FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streami…
from 0, < 3.1.9-r0
MEDIUM6.5The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer derefer…
from 0, < 3.2.6-r0
MEDIUM6.5ffmpeg - security update
from 0, < 3.1.11-r1
MEDIUM6.5In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU…
from 0, < 3.1.11-r0
MEDIUM6.5In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consum…
from 0, < 3.1.11-r0
MEDIUM6.5In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause hug…
from 0, < 3.1.11-r0
MEDIUM6.5In libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause…
from 0, < 3.1.11-r0
MEDIUM6.5In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption.
from 0, < 3.1.11-r0
MEDIUM6.5In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allo…
from 0, < 3.1.11-r0
MEDIUM6.5In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption.
from 0, < 3.1.11-r0
MEDIUM6.5In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory…
from 0, < 3.1.11-r0
MEDIUM6.5libav - security update
from 0, < 3.1.11-r0
MEDIUM6.5ffmpeg - security update
from 0, < 3.1.11-r0
MEDIUM6.5The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service (…
from 0, < 2.8.11-r0
MEDIUM5.5FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote…
from 0, < 2.8.11-r0
MEDIUM5.5FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote…
from 0, < 2.8.11-r0
MEDIUM5.5The read_gab2_sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (NULL pointe…
from 0, < 2.8.11-r0
MEDIUM5.5The avi_read_seek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (assert faul…
from 0, < 2.8.11-r0
MEDIUM5.5The ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (buffer o…
from 0, < 2.8.11-r0
MEDIUM5.5The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has…
from 0, < 3.0.7-r0
MEDIUM5.5The avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that…
from 0, < 2.8.11-r0
MEDIUM5.5The zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service…
from 0, < 2.8.11-r0