Vulnerabilities > Ffmpeg > Ffmpeg > 3.1.1

DATE CVE VULNERABILITY TITLE RISK
2016-12-23 CVE-2016-7502 Out-of-bounds Read vulnerability in Ffmpeg
The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavs_decode.
network
ffmpeg CWE-125
6.8
2016-12-23 CVE-2016-7450 Out-of-bounds Read vulnerability in Ffmpeg
The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file.
network
ffmpeg CWE-125
6.8
2016-12-23 CVE-2016-7122 Resource Management Errors vulnerability in Ffmpeg
The avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure.
network
ffmpeg CWE-399
4.3
2016-12-23 CVE-2016-6881 Resource Management Errors vulnerability in Ffmpeg
The zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file.
network
ffmpeg CWE-399
4.3
2016-12-23 CVE-2016-6671 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Ffmpeg
The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted SWF file.
network
ffmpeg CWE-119
6.8