Vulnerabilities > Ffmpeg > High

DATE CVE VULNERABILITY TITLE RISK
2018-07-23 CVE-2018-1999010 Out-of-bounds Read vulnerability in multiple products
FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data.
network
low complexity
ffmpeg debian CWE-125
7.5
2018-04-07 CVE-2018-9841 Out-of-bounds Read vulnerability in Ffmpeg
The export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a long filename.
network
low complexity
ffmpeg CWE-125
8.8
2017-11-06 CVE-2017-15672 Out-of-bounds Read vulnerability in multiple products
The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read.
network
low complexity
ffmpeg debian CWE-125
8.8
2017-09-09 CVE-2017-14223 Resource Exhaustion vulnerability in multiple products
In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption.
7.1
2017-09-09 CVE-2017-14222 Excessive Iteration vulnerability in Ffmpeg 3.3.3
In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption.
network
ffmpeg CWE-834
7.1
2017-09-07 CVE-2017-14171 Excessive Iteration vulnerability in Ffmpeg 3.3.3
In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption.
network
ffmpeg CWE-834
7.1
2017-09-07 CVE-2017-14170 Excessive Iteration vulnerability in Ffmpeg 3.3.3
In libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause huge CPU consumption.
network
ffmpeg CWE-834
7.1
2017-08-31 CVE-2017-14059 Excessive Iteration vulnerability in Ffmpeg 3.3.3
In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption.
network
ffmpeg CWE-834
7.1
2017-08-31 CVE-2017-14057 Excessive Iteration vulnerability in Ffmpeg 3.3.3
In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption.
network
ffmpeg CWE-834
7.1
2017-08-31 CVE-2017-14056 Excessive Iteration vulnerability in Ffmpeg 3.3.3
In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption.
network
ffmpeg CWE-834
7.1