Vulnerabilities > Ffmpeg
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-08-23 | CVE-2018-15822 | Reachable Assertion vulnerability in multiple products The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, leading to an assertion failure. | 7.5 |
| 2018-07-23 | CVE-2018-1999015 | Out-of-bounds Read vulnerability in Ffmpeg FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASF_F format demuxer that can result in heap memory reading. | 6.5 |
| 2018-07-23 | CVE-2018-1999014 | Out-of-bounds Read vulnerability in Ffmpeg FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS. | 6.5 |
| 2018-07-23 | CVE-2018-1999013 | Use After Free vulnerability in Ffmpeg FFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free vulnerability in the realmedia demuxer that can result in vulnerability allows attacker to read heap memory. | 6.5 |
| 2018-07-23 | CVE-2018-1999012 | Infinite Loop vulnerability in Ffmpeg FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulnerability that allows attackers to consume excessive amount of resources like CPU and RAM. | 6.5 |
| 2018-07-23 | CVE-2018-1999011 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Ffmpeg FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asf_o format demuxer that can result in heap-buffer-overflow that may result in remote code execution. | 8.8 |
| 2018-07-23 | CVE-2018-1999010 | Out-of-bounds Read vulnerability in multiple products FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. | 9.8 |
| 2018-07-19 | CVE-2018-14395 | Divide By Zero vulnerability in multiple products libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted audio file when converting to the MOV audio format. | 6.5 |
| 2018-07-19 | CVE-2018-14394 | Divide By Zero vulnerability in Ffmpeg 2.8.16 libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted Waveform audio file. | 6.5 |
| 2018-07-05 | CVE-2018-13305 | Out-of-bounds Read vulnerability in Ffmpeg 4.0.1 In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service. | 8.1 |