Vulnerabilities > Ffmpeg

DATE CVE VULNERABILITY TITLE RISK
2017-08-09 CVE-2012-2781 Unspecified vulnerability in Ffmpeg
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2778, and CVE-2012-2780.
network
low complexity
ffmpeg
critical
9.8
2017-08-09 CVE-2012-2780 Unspecified vulnerability in Ffmpeg
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2778, and CVE-2012-2781.
network
low complexity
ffmpeg
critical
9.8
2017-08-09 CVE-2012-2778 Unspecified vulnerability in Ffmpeg
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2780, and CVE-2012-2781.
network
low complexity
ffmpeg
critical
9.8
2017-08-09 CVE-2012-2773 Unspecified vulnerability in Ffmpeg
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2778, CVE-2012-2780, and CVE-2012-2781.
network
low complexity
ffmpeg
critical
9.8
2017-08-09 CVE-2012-2771 Unspecified vulnerability in Ffmpeg
Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2773, CVE-2012-2778, CVE-2012-2780, and CVE-2012-2781.
network
low complexity
ffmpeg
critical
9.8
2017-07-28 CVE-2017-11719 Out-of-bounds Read vulnerability in Ffmpeg
The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a crafted DNxHD file.
local
low complexity
ffmpeg CWE-125
7.8
2017-07-27 CVE-2017-11665 Improper Input Validation vulnerability in Ffmpeg 3.3.2
The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segmentation Violation and application crash) via a crafted stream.
network
low complexity
ffmpeg CWE-20
7.5
2017-07-17 CVE-2017-11399 Out-of-bounds Read vulnerability in Ffmpeg
Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file.
local
low complexity
ffmpeg CWE-125
7.8
2017-06-28 CVE-2017-9996 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Ffmpeg
The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
local
low complexity
ffmpeg CWE-119
7.8
2017-06-28 CVE-2017-9995 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Ffmpeg 3.3
libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
local
low complexity
ffmpeg CWE-119
7.8