Vulnerabilities > CVE-2016-7502 - Out-of-bounds Read vulnerability in Ffmpeg

CVSS 6.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

ffmpeg

CWE-125

nessus

NVD

Published: 2016-12-23

Updated: 2017-07-01

Summary

The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavs_decode.

Vulnerable Configurations

Part	Description	Count
Application	Ffmpeg Ffmpeg Ffmpeg 0.3 Ffmpeg Ffmpeg 0.3.1 Ffmpeg Ffmpeg 0.3.2 Ffmpeg Ffmpeg 0.3.3 Ffmpeg Ffmpeg 0.3.4 Ffmpeg Ffmpeg 0.4.0 Ffmpeg Ffmpeg 0.4.2 Ffmpeg Ffmpeg 0.4.3 Ffmpeg Ffmpeg 0.4.4 Ffmpeg Ffmpeg 0.4.5 Ffmpeg Ffmpeg 0.4.6 Ffmpeg Ffmpeg 0.4.7 Ffmpeg Ffmpeg 0.4.8 Ffmpeg Ffmpeg 0.4.9 Ffmpeg Ffmpeg 0.4.9_Pre1 Ffmpeg Ffmpeg 0.5 Ffmpeg Ffmpeg 0.5.1 Ffmpeg Ffmpeg 0.5.2 Ffmpeg Ffmpeg 0.5.3 Ffmpeg Ffmpeg 0.5.4 Ffmpeg Ffmpeg 0.5.4.5 Ffmpeg Ffmpeg 0.5.4.6 Ffmpeg Ffmpeg 0.5.5 Ffmpeg Ffmpeg 0.5.6 Ffmpeg Ffmpeg 0.5.7 Ffmpeg Ffmpeg 0.5.8 Ffmpeg Ffmpeg 0.5.9 Ffmpeg Ffmpeg 0.5.10 Ffmpeg Ffmpeg 0.5.11 Ffmpeg Ffmpeg 0.5.12 Ffmpeg Ffmpeg 0.5.13 Ffmpeg Ffmpeg 0.5.14 Ffmpeg Ffmpeg 0.5.15 Ffmpeg Ffmpeg 0.6 Ffmpeg Ffmpeg 0.6.1 Ffmpeg Ffmpeg 0.6.2 Ffmpeg Ffmpeg 0.6.3 Ffmpeg Ffmpeg 0.6.4 Ffmpeg Ffmpeg 0.6.5 Ffmpeg Ffmpeg 0.6.6 Ffmpeg Ffmpeg 0.6.7 Ffmpeg Ffmpeg 0.7 Ffmpeg Ffmpeg 0.7.1 Ffmpeg Ffmpeg 0.7.2 Ffmpeg Ffmpeg 0.7.3 Ffmpeg Ffmpeg 0.7.4 Ffmpeg Ffmpeg 0.7.5 Ffmpeg Ffmpeg 0.7.6 Ffmpeg Ffmpeg 0.7.7 Ffmpeg Ffmpeg 0.7.8 Ffmpeg Ffmpeg 0.7.9 Ffmpeg Ffmpeg 0.7.10 Ffmpeg Ffmpeg 0.7.11 Ffmpeg Ffmpeg 0.7.12 Ffmpeg Ffmpeg 0.7.13 Ffmpeg Ffmpeg 0.7.14 Ffmpeg Ffmpeg 0.7.15 Ffmpeg Ffmpeg 0.7.16 Ffmpeg Ffmpeg 0.7.17 Ffmpeg Ffmpeg 0.8 Ffmpeg Ffmpeg 0.8.0 Ffmpeg Ffmpeg 0.8.1 Ffmpeg Ffmpeg 0.8.2 Ffmpeg Ffmpeg 0.8.3 Ffmpeg Ffmpeg 0.8.4 Ffmpeg Ffmpeg 0.8.5 Ffmpeg Ffmpeg 0.8.5.3 Ffmpeg Ffmpeg 0.8.5.4 Ffmpeg Ffmpeg 0.8.6 Ffmpeg Ffmpeg 0.8.7 Ffmpeg Ffmpeg 0.8.8 Ffmpeg Ffmpeg 0.8.9 Ffmpeg Ffmpeg 0.8.10 Ffmpeg Ffmpeg 0.8.11 Ffmpeg Ffmpeg 0.8.12 Ffmpeg Ffmpeg 0.8.13 Ffmpeg Ffmpeg 0.8.14 Ffmpeg Ffmpeg 0.8.15 Ffmpeg Ffmpeg 0.9 Ffmpeg Ffmpeg 0.9.1 Ffmpeg Ffmpeg 0.9.2 Ffmpeg Ffmpeg 0.9.3 Ffmpeg Ffmpeg 0.9.4 Ffmpeg Ffmpeg 0.10 Ffmpeg Ffmpeg 0.10.1 Ffmpeg Ffmpeg 0.10.2 Ffmpeg Ffmpeg 0.10.3 Ffmpeg Ffmpeg 0.10.4 Ffmpeg Ffmpeg 0.10.5 Ffmpeg Ffmpeg 0.10.6 Ffmpeg Ffmpeg 0.10.7 Ffmpeg Ffmpeg 0.10.8 Ffmpeg Ffmpeg 0.10.9 Ffmpeg Ffmpeg 0.10.10 Ffmpeg Ffmpeg 0.10.11 Ffmpeg Ffmpeg 0.10.12 Ffmpeg Ffmpeg 0.10.13 Ffmpeg Ffmpeg 0.10.14 Ffmpeg Ffmpeg 0.10.15 Ffmpeg Ffmpeg 0.10.16 Ffmpeg Ffmpeg 0.11 Ffmpeg Ffmpeg 0.11.1 Ffmpeg Ffmpeg 0.11.2 Ffmpeg Ffmpeg 0.11.3 Ffmpeg Ffmpeg 0.11.4 Ffmpeg Ffmpeg 0.11.5 Ffmpeg Ffmpeg 0.12 Ffmpeg Ffmpeg 1.0 Ffmpeg Ffmpeg 1.0.1 Ffmpeg Ffmpeg 1.0.2 Ffmpeg Ffmpeg 1.0.3 Ffmpeg Ffmpeg 1.0.4 Ffmpeg Ffmpeg 1.0.5 Ffmpeg Ffmpeg 1.0.6 Ffmpeg Ffmpeg 1.0.7 Ffmpeg Ffmpeg 1.0.8 Ffmpeg Ffmpeg 1.0.9 Ffmpeg Ffmpeg 1.0.10 Ffmpeg Ffmpeg 1.1 Ffmpeg Ffmpeg 1.1.1 Ffmpeg Ffmpeg 1.1.2 Ffmpeg Ffmpeg 1.1.3 Ffmpeg Ffmpeg 1.1.4 Ffmpeg Ffmpeg 1.1.5 Ffmpeg Ffmpeg 1.1.6 Ffmpeg Ffmpeg 1.1.7 Ffmpeg Ffmpeg 1.1.8 Ffmpeg Ffmpeg 1.1.9 Ffmpeg Ffmpeg 1.1.10 Ffmpeg Ffmpeg 1.1.11 Ffmpeg Ffmpeg 1.1.12 Ffmpeg Ffmpeg 1.1.13 Ffmpeg Ffmpeg 1.1.14 Ffmpeg Ffmpeg 1.1.15 Ffmpeg Ffmpeg 1.1.16 Ffmpeg Ffmpeg 1.2 Ffmpeg Ffmpeg 1.2.1 Ffmpeg Ffmpeg 1.2.2 Ffmpeg Ffmpeg 1.2.3 Ffmpeg Ffmpeg 1.2.4 Ffmpeg Ffmpeg 1.2.5 Ffmpeg Ffmpeg 1.2.6 Ffmpeg Ffmpeg 1.2.7 Ffmpeg Ffmpeg 1.2.8 Ffmpeg Ffmpeg 1.2.9 Ffmpeg Ffmpeg 1.2.10 Ffmpeg Ffmpeg 1.2.11 Ffmpeg Ffmpeg 1.2.12 Ffmpeg Ffmpeg 1.3 Ffmpeg Ffmpeg 2.0 Ffmpeg Ffmpeg 2.0.1 Ffmpeg Ffmpeg 2.0.2 Ffmpeg Ffmpeg 2.0.3 Ffmpeg Ffmpeg 2.0.4 Ffmpeg Ffmpeg 2.0.5 Ffmpeg Ffmpeg 2.0.6 Ffmpeg Ffmpeg 2.0.7 Ffmpeg Ffmpeg 2.1 Ffmpeg Ffmpeg 2.1.1 Ffmpeg Ffmpeg 2.1.2 Ffmpeg Ffmpeg 2.1.3 Ffmpeg Ffmpeg 2.1.4 Ffmpeg Ffmpeg 2.1.5 Ffmpeg Ffmpeg 2.1.6 Ffmpeg Ffmpeg 2.1.7 Ffmpeg Ffmpeg 2.1.8 Ffmpeg Ffmpeg 2.2 Ffmpeg Ffmpeg 2.2.0 Ffmpeg Ffmpeg 2.2.1 Ffmpeg Ffmpeg 2.2.2 Ffmpeg Ffmpeg 2.2.3 Ffmpeg Ffmpeg 2.2.4 Ffmpeg Ffmpeg 2.2.5 Ffmpeg Ffmpeg 2.2.6 Ffmpeg Ffmpeg 2.2.7 Ffmpeg Ffmpeg 2.2.8 Ffmpeg Ffmpeg 2.2.9 Ffmpeg Ffmpeg 2.2.10 Ffmpeg Ffmpeg 2.2.11 Ffmpeg Ffmpeg 2.2.12 Ffmpeg Ffmpeg 2.2.13 Ffmpeg Ffmpeg 2.2.14 Ffmpeg Ffmpeg 2.2.15 Ffmpeg Ffmpeg 2.2.16 Ffmpeg Ffmpeg 2.3 Ffmpeg Ffmpeg 2.3.1 Ffmpeg Ffmpeg 2.3.2 Ffmpeg Ffmpeg 2.3.3 Ffmpeg Ffmpeg 2.3.4 Ffmpeg Ffmpeg 2.3.5 Ffmpeg Ffmpeg 2.3.6 Ffmpeg Ffmpeg 2.4 Ffmpeg Ffmpeg 2.4.0 Ffmpeg Ffmpeg 2.4.1 Ffmpeg Ffmpeg 2.4.2 Ffmpeg Ffmpeg 2.4.3 Ffmpeg Ffmpeg 2.4.4 Ffmpeg Ffmpeg 2.4.5 Ffmpeg Ffmpeg 2.4.6 Ffmpeg Ffmpeg 2.4.7 Ffmpeg Ffmpeg 2.4.8 Ffmpeg Ffmpeg 2.4.9 Ffmpeg Ffmpeg 2.4.10 Ffmpeg Ffmpeg 2.4.11 Ffmpeg Ffmpeg 2.4.12 Ffmpeg Ffmpeg 2.4.13 Ffmpeg Ffmpeg 2.4.14 Ffmpeg Ffmpeg 2.5 Ffmpeg Ffmpeg 2.5.0 Ffmpeg Ffmpeg 2.5.1 Ffmpeg Ffmpeg 2.5.2 Ffmpeg Ffmpeg 2.5.3 Ffmpeg Ffmpeg 2.5.4 Ffmpeg Ffmpeg 2.5.5 Ffmpeg Ffmpeg 2.5.6 Ffmpeg Ffmpeg 2.5.7 Ffmpeg Ffmpeg 2.5.8 Ffmpeg Ffmpeg 2.5.9 Ffmpeg Ffmpeg 2.5.10 Ffmpeg Ffmpeg 2.5.11 Ffmpeg Ffmpeg 2.6 Ffmpeg Ffmpeg 2.6.0 Ffmpeg Ffmpeg 2.6.1 Ffmpeg Ffmpeg 2.6.2 Ffmpeg Ffmpeg 2.6.3 Ffmpeg Ffmpeg 2.6.4 Ffmpeg Ffmpeg 2.6.5 Ffmpeg Ffmpeg 2.6.6 Ffmpeg Ffmpeg 2.6.7 Ffmpeg Ffmpeg 2.6.8 Ffmpeg Ffmpeg 2.6.9 Ffmpeg Ffmpeg 2.7 Ffmpeg Ffmpeg 2.7.0 Ffmpeg Ffmpeg 2.7.1 Ffmpeg Ffmpeg 2.7.2 Ffmpeg Ffmpeg 2.7.3 Ffmpeg Ffmpeg 2.7.4 Ffmpeg Ffmpeg 2.7.5 Ffmpeg Ffmpeg 2.7.6 Ffmpeg Ffmpeg 2.7.7 Ffmpeg Ffmpeg 2.8 Ffmpeg Ffmpeg 2.8.0 Ffmpeg Ffmpeg 2.8.1 Ffmpeg Ffmpeg 2.8.2 Ffmpeg Ffmpeg 2.8.3 Ffmpeg Ffmpeg 2.8.4 Ffmpeg Ffmpeg 2.8.5 Ffmpeg Ffmpeg 2.8.6 Ffmpeg Ffmpeg 2.8.7 Ffmpeg Ffmpeg 2.8.8 Ffmpeg Ffmpeg 2.8.9 Ffmpeg Ffmpeg 2.8.10 Ffmpeg Ffmpeg 2.8.11 Ffmpeg Ffmpeg 2.8.12 Ffmpeg Ffmpeg 2.8.13 Ffmpeg Ffmpeg 2.8.14 Ffmpeg Ffmpeg 2.8.15 Ffmpeg Ffmpeg 2.9 Ffmpeg Ffmpeg 3.0 Ffmpeg Ffmpeg 3.0.1 Ffmpeg Ffmpeg 3.0.2 Ffmpeg Ffmpeg 3.0.3 Ffmpeg Ffmpeg 3.0.4 Ffmpeg Ffmpeg 3.0.5 Ffmpeg Ffmpeg 3.0.6 Ffmpeg Ffmpeg 3.0.7 Ffmpeg Ffmpeg 3.0.8 Ffmpeg Ffmpeg 3.0.9 Ffmpeg Ffmpeg 3.0.10 Ffmpeg Ffmpeg 3.0.11 Ffmpeg Ffmpeg 3.0.12 Ffmpeg Ffmpeg 3.1 Ffmpeg Ffmpeg 3.1.1 Ffmpeg Ffmpeg 3.1.2 Ffmpeg Ffmpeg 3.1.3	289

Common Weakness Enumeration (CWE)

CWE-125 - Out-of-bounds Read

Common Attack Pattern Enumeration and Classification (CAPEC)

Overread Buffers
An adversary attacks a target by providing input that causes an application to read beyond the boundary of a defined buffer. This typically occurs when a value influencing where to start or stop reading is set to reflect positions outside of the valid memory location of the buffer. This type of attack may result in exposure of sensitive information, a system crash, or arbitrary code execution.

Nessus

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2016-1203.NASL
description	This update for ffmpeg fixes multiple security issues in ffmpeg (boo#1003806) These vulnerabilities can be triggered when processing specially crafted avi video content, and could lead to crashes or have unspecified further impact including potential code execution. - CVE-2016-7562: out-of-bounds array write fault via specially crafted avi files - CVE-2016-7502: out-of-bounds array write via incorrect block values - CVE-2016-7905: null-point-exception when decoding avi files with crafted
last seen	2020-06-05
modified	2016-10-19
plugin id	94129
published	2016-10-19
reporter	This script is Copyright (C) 2016-2020 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/94129
title	openSUSE Security Update : ffmpeg (openSUSE-2016-1203)

NASL family	Gentoo Local Security Checks
NASL id	GENTOO_GLSA-201701-71.NASL
description	The remote host is affected by the vulnerability described in GLSA-201701-71 (FFmpeg: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could cause a Denial of Service condition via various crafted media file types or have other unspecified impacts. Workaround : There is no known workaround at this time.
last seen	2020-06-01
modified	2020-06-02
plugin id	96857
published	2017-01-30
reporter	This script is Copyright (C) 2017 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/96857
title	GLSA-201701-71 : FFmpeg: Multiple vulnerabilities

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Nessus

References