Vulnerabilities > Ffmpeg > Ffmpeg > 3.1.10
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2017-09-27 | CVE-2017-14767 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Ffmpeg The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-parameter-sets values, which allows remote attackers to cause a denial of service (heap buffer overflow) or possibly have unspecified other impact via a crafted sdp file. | 6.8 |
2017-07-28 | CVE-2017-11719 | Out-of-bounds Read vulnerability in Ffmpeg The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a crafted DNxHD file. | 6.8 |
2017-07-17 | CVE-2017-11399 | Out-of-bounds Read vulnerability in Ffmpeg Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file. | 6.8 |
2017-06-28 | CVE-2017-9990 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Ffmpeg Stack-based buffer overflow in the color_string_to_rgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. | 6.8 |
2017-04-14 | CVE-2017-7859 | Out-of-bounds Write vulnerability in Ffmpeg FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ff_h264_slice_context_init function in libavcodec/h264dec.c. | 7.5 |
2016-12-23 | CVE-2016-9561 | Resource Management Errors vulnerability in Ffmpeg The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service (allocation of huge memory, and being killed by the OS) via a crafted MOV file. | 4.3 |