Lian Yihan

**Name of the Vulnerable Software and Affected Versions** FFmpeg versions prior to 3.1.2 **Description** The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafted SWF file, due to memory corruption in the raw decode function in libavcodec/rawdec.c. **Recommendations** For versions prior to 3.1.2, update to version 3.1.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** FFmpeg versions prior to 3.2.1 **Description** The issue allows remote attackers to cause a denial of service by allocating huge memory via a crafted MOV file. This is due to a problem in the che configure function in libavcodec/aacdec template.c. **Recommendations** For versions prior to 3.2.1, update to version 3.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted MOV files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Qemu (affected versions not specified) **Description** The issue allows remote attackers to cause a denial of service, resulting in an arithmetic exception and application crash, via crafted SetPixelFormat messages from a client. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QEMU versions prior to 2.1.0 **Description** The issue is related to an integer overflow in the VNC display driver of the QEMU emulator. This overflow can be triggered by a CLIENT CUT TEXT message, leading to an infinite loop and eventually causing the QEMU process to crash, resulting in a denial of service. The vulnerability is applicable to QEMU and affects Arista EOS when hosting guest virtual machines, particularly if untrusted users have access to the virtual machine. **Recommendations** For QEMU versions prior to 2.1.0, update to version 2.1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the VNC display driver or limiting the ability of users to send CLIENT CUT TEXT messages to prevent the denial of service attack.