Vulnerabilities > Ffmpeg > High

DATE CVE VULNERABILITY TITLE RISK
2015-12-24 CVE-2015-8661 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Ffmpeg
The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted H.264 data.
network
low complexity
ffmpeg CWE-119
8.3
2013-12-09 CVE-2011-4351 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Ffmpeg
Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute arbitrary code via unspecified vectors.
network
low complexity
ffmpeg CWE-119
7.5
2013-11-23 CVE-2013-4263 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Ffmpeg
libavfilter in FFmpeg before 2.0.1 has unspecified impact and remote vectors related to a crafted "plane," which triggers an out-of-bounds heap write.
network
low complexity
ffmpeg CWE-119
7.5
2006-09-14 CVE-2006-4800 Buffer Overflow vulnerability in FFmpeg Image File
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c.
network
low complexity
ffmpeg
7.5
2005-12-07 CVE-2005-4048 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Ffmpeg
Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.
network
low complexity
ffmpeg CWE-119
7.5