Filtered by vendor Libav
Subscriptions
Total
107 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2025-8586 | 1 Libav | 1 Libav | 2025-08-06 | 3.3 Low |
| A vulnerability, which was classified as problematic, was found in libav up to 12.3. This affects the function ff_seek_frame_binary of the file /libavformat/utils.c of the component MPEG File Parser. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer. | ||||
| CVE-2025-8584 | 1 Libav | 1 Libav | 2025-08-05 | 3.3 Low |
| A vulnerability classified as problematic was found in libav up to 12.3. Affected by this vulnerability is the function av_buffer_unref of the file libavutil/buffer.c of the component AVI File Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer. | ||||
| CVE-2017-17130 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| The ff_free_picture_tables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to vc1_decode_i_blocks_adv. | ||||
| CVE-2016-9823 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| libavcodec/x86/mpegvideo.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. | ||||
| CVE-2016-9826 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| libavcodec/ituh263dec.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. | ||||
| CVE-2017-17129 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and application crash) or possibly have unspecified other impact via a crafted file. | ||||
| CVE-2017-7206 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file. | ||||
| CVE-2017-7208 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file. | ||||
| CVE-2016-8675 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| The get_vlc2 function in get_bits.h in Libav before 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted mp3 file, possibly related to startcode sequences during m4v detection. | ||||
| CVE-2016-9819 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| libavcodec/mpegvideo.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. | ||||
| CVE-2016-9821 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| Integer overflow in libavcodec/mpegvideo_parser.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. | ||||
| CVE-2016-9825 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| libswscale/utils.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. | ||||
| CVE-2017-11684 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via crafted input. | ||||
| CVE-2017-17128 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| The h264_slice_init function in libavcodec/h264_slice.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted file. | ||||
| CVE-2016-9822 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| Integer overflow in libavcodec/mpeg12dec.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. | ||||
| CVE-2016-9824 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| Integer overflow in libswscale/x86/swscale.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. | ||||
| CVE-2016-7393 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| Stack-based buffer overflow in the aac_sync function in aac_parser.c in Libav before 11.5 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. | ||||
| CVE-2016-6832 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| Heap-based buffer overflow in the ff_audio_resample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service (crash) via vectors related to buffer resizing. | ||||
| CVE-2017-9051 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsv_read_chunk function in libavformat/nsvdec.c. | ||||
| CVE-2017-9987 | 1 Libav | 1 Libav | 2025-04-20 | N/A |
| There is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav 12.1. A crafted input can lead to a remote denial of service attack. | ||||