You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm cloning this repo to make some modifications to customize. However, I've noticed that some CVEs which were confirmed and fixed by FFmpeg do not get patched in this repo. To enhance the availability of my project as far as possible, I will appreciate it if any of the CVE below do exist in this repo as well, so that I can fix these security issue myself by applying the corresponding patch.
Here are the CVEs I found in this repo unpatched, but get fixed in FFmpeg:
I'm cloning this repo to make some modifications to customize. However, I've noticed that some CVEs which were confirmed and fixed by FFmpeg do not get patched in this repo. To enhance the availability of my project as far as possible, I will appreciate it if any of the CVE below do exist in this repo as well, so that I can fix these security issue myself by applying the corresponding patch.
Here are the CVEs I found in this repo unpatched, but get fixed in FFmpeg:
CVE-2014-2263 in trunk/libs/libav/ffmpeg-0.11.x/libavformat/mpegtsenc.c's function
static int mpegts_write_pmt(AVFormatContext *s, MpegTSService *service)
, with patch here for your reference.CVE-2012-2791 in trunk/libs/libav/ffmpeg-0.6.x/libavcodec/ivi_common.c's function
int ff_ivi_decode_blocks(GetBitContext *gb, IVIBandDesc *band, IVITile *tile)
, with patch here for your reference.CVE-2017-7862 in trunk/libs/libav/ffmpeg-0.11.x/libavcodec/pictordec.c's function
static int decode_frame(AVCodecContext *avctx, void *data, int *data_size, AVPacket *avpkt)
, with patch here for your reference.CVE-2012-2794 in trunk/libs/libav/ffmpeg-0.6.x/libavcodec/indeo5.c's function
static int decode_mb_info(IVI5DecContext *ctx, IVIBandDesc *band, IVITile *tile, AVCodecContext *avctx)
, with patch here for your reference.CVE-2020-20446 in trunk/libs/libav/ffmpeg-0.11.x/libavcodec/aacpsy.c's function
static void psy_3gpp_analyze_channel(FFPsyContext *ctx, int channel, const float *coefs, const FFPsyWindowInfo *wi)
, with patch here for your reference.The text was updated successfully, but these errors were encountered: