Search CVE reports

1 – 10 of 15 results

Detailed view

Sort by:

CVE-2024-47606

Medium priority

Some fixes available 8 of 15

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of...

4 affected packages

gst-plugins-good0.10, gst-plugins-good1.0, gstreamer0.10, gstreamer1.0

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gst-plugins-good0.10	Not in release	Not in release	Not in release	—
gst-plugins-good1.0	Fixed	Fixed	Fixed	Needs evaluation
gstreamer0.10	Not in release	Not in release	Not in release	—
gstreamer1.0	Fixed	Fixed	Fixed	Needs evaluation

CVE-2018-13304

Medium priority

Needs evaluation

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a...

12 affected packages

chromium-browser, kino, mplayer, dvbcut, gst-libav1.0...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	Ignored	Ignored	Not in release	Ignored
kino	Not in release	Needs evaluation	Needs evaluation	Needs evaluation
mplayer	Not affected	Not affected	Not affected	Not affected
dvbcut	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-libav1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
mythtv	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer0.10-ffmpeg	Not in release	Not in release	Not in release	Not in release
xine-lib	Not in release	Not in release	Not in release	Not in release
vlc	Not affected	Not affected	Not affected	Not affected
ffmpeg	Not affected	Not affected	Not affected	Not affected
libav	Not in release	Not in release	Not in release	Not in release
oxide-qt	Not in release	Not in release	Not in release	Not in release

CVE-2018-13303

Low priority

Needs evaluation

In FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the avpriv_ac3_parse_header function in libavcodec/ac3_parser.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4,...

10 affected packages

chromium-browser, ffmpeg, gst-libav1.0, kino, mythtv...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	Ignored	Ignored	Not in release	Ignored
ffmpeg	Not affected	Not affected	Not affected	Not affected
gst-libav1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kino	Not in release	Needs evaluation	Needs evaluation	Needs evaluation
mythtv	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gstreamer0.10-ffmpeg	Not in release	Not in release	Not in release	Not in release
libav	Not in release	Not in release	Not in release	Not in release
oxide-qt	Not in release	Not in release	Not in release	Not in release
mplayer	Not affected	Not affected	Not affected	Not affected
vlc	Not affected	Not affected	Not affected	Not affected

CVE-2018-13302

Medium priority

Some fixes available 16 of 82

In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array access while...

10 affected packages

chromium-browser, ffmpeg, gst-libav1.0, kino, mythtv...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	Ignored	Ignored	Not in release	Ignored
ffmpeg	Fixed	Fixed	Fixed	Fixed
gst-libav1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
kino	Not in release	Needs evaluation	Needs evaluation	Needs evaluation
mythtv	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libav	Not in release	Not in release	Not in release	Not in release
gstreamer0.10-ffmpeg	Not in release	Not in release	Not in release	Not in release
mplayer	Not affected	Not affected	Not affected	Not affected
oxide-qt	Not in release	Not in release	Not in release	Not in release
vlc	Not affected	Not affected	Not affected	Not affected

CVE-2018-13301

Low priority

Needs evaluation

In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to...

9 affected packages

chromium-browser, libav, gstreamer0.10-ffmpeg, vlc, gst-libav1.0...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	Ignored	Ignored	Not in release	Ignored
libav	Not in release	Not in release	Not in release	Not in release
gstreamer0.10-ffmpeg	Not in release	Not in release	Not in release	Not in release
vlc	Not affected	Not affected	Not affected	Not affected
gst-libav1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
mythtv	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ffmpeg	Not affected	Not affected	Not affected	Not affected
mplayer	Not affected	Not affected	Not affected	Not affected
oxide-qt	Not in release	Not in release	Not in release	Not in release

CVE-2018-13300

Medium priority

Some fixes available 15 of 81

In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI...

10 affected packages

chromium-browser, ffmpeg, gstreamer0.10-ffmpeg, mplayer, vlc...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	Ignored	Ignored	Not in release	Ignored
ffmpeg	Fixed	Fixed	Fixed	Fixed
gstreamer0.10-ffmpeg	Not in release	Not in release	Not in release	Not in release
mplayer	Not affected	Not affected	Not affected	Not affected
vlc	Not affected	Not affected	Not affected	Not affected
kino	Not in release	Needs evaluation	Needs evaluation	Needs evaluation
mythtv	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libav	Not in release	Not in release	Not in release	Not in release
gst-libav1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
oxide-qt	Not in release	Not in release	Not in release	Not in release

CVE-2017-5838

Low priority

Some fixes available 1 of 4

The gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a malformed datetime string.

2 affected packages

gstreamer0.10, gstreamer1.0

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gstreamer0.10	Not in release	Not in release	Not in release	Not in release
gstreamer1.0	Not affected	Not affected	Not affected	Not affected

CVE-2015-1872

Low priority

Some fixes available 1 of 25

The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of...

4 affected packages

gst-libav1.0, libav, kino, gstreamer0.10-ffmpeg

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
gst-libav1.0	Not affected	Not affected	Not affected	Not affected
libav	Not in release	Not in release	Not in release	Not in release
kino	Not in release	Vulnerable	Vulnerable	Vulnerable
gstreamer0.10-ffmpeg	Not in release	Not in release	Not in release	Not in release

CVE-2012-6617

Medium priority

Needs evaluation

The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.

9 affected packages

chromium-browser, ffmpeg, gstreamer0.10-ffmpeg, kino, libav...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
chromium-browser	Not affected	Not affected	Not in release	Not affected
ffmpeg	Not affected	Not affected	Not affected	Not affected
gstreamer0.10-ffmpeg	Not in release	Not in release	Not in release	Not in release
kino	Not in release	Not affected	Not affected	Not affected
libav	Not in release	Not in release	Not in release	Not in release
oxide-qt	Not in release	Not in release	Not in release	Not in release
mythtv	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
qtwebengine-opensource-src	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gst-libav1.0	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2009-0385

Medium priority

Some fixes available 4 of 24

Integer signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed 4X movie file with a large current_track value,...

7 affected packages

ffmpeg, ffmpeg-debian, gstreamer0.10-ffmpeg, kino, motion...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
ffmpeg	—	—	—	—
ffmpeg-debian	—	—	—	—
gstreamer0.10-ffmpeg	—	—	—	—
kino	—	—	—	—
motion	—	—	—	—
mplayer	—	—	—	—
smilutils	—	—	—	—

Export to JSON

Results by page: