OPENSUSE-SU-2026:20064-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2025-63757: Fixed swscale/output: Fix integer overflow in yuv2ya16Xctemplate bsc1255392...

ffmpeg:ffmpeg_AV_CODEC_ID_QDM2_fuzzer: Heap-use-after-free in qdm2_get_vlc

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4710271510970368 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDQDM2fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free...

Debian: Security Advisory (DLA-4440-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4440 : ffmpeg - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4440 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4440-1 [email protected]...

ffmpeg:ffmpeg_dem_H264_fuzzer: Use-of-uninitialized-value in h264_parse

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6087031330766848 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemH264fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

[SECURITY] [DLA 4440-1] ffmpeg security update

Debian LTS Advisory DLA-4440-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara January 16, 2026 https://wiki.debian.org/LTS Package : ffmpeg Version : 7:4.3.9-0+deb11u2 CVE ID : CVE-2023-6603 CVE-2024-36615 CVE-2025-1594 CVE-2025-7700 CVE-2025-9951...

DLA-4440-1 ffmpeg - security update

Bulletin has no description...

CVE-2025-34442

creationtimestamp| type| source ---|---|--- 2026-01-15 23:54:26+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/avideonotifyffmpegunauthrce.rb 2026-01-16 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mckypdx2ay22...

CVE-2025-34441

creationtimestamp| type| source ---|---|--- 2026-01-15 23:54:26+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/avideonotifyffmpegunauthrce.rb 2026-01-16 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mckypdty5q2f...

OPENSUSE-SU-2026:10053-1 ffmpeg-4-4.4.6-11.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.6-11.1 package on the GA media of openSUSE Tumbleweed...

Astra Linux – Vulnerability in ffmpeg

A flaw was discovered in FFmpeg. This vulnerability allows for unexpected additional CPU load and storage consumption, potentially leading to reduced performance or denial of service due to the demuxing of arbitrary data as XBIN-format data without proper format validation...

ffmpeg-4-4.4.6-10.1 on GA media (moderate)

ffmpeg-4-4.4.6-10.1 on GA media Announcement ID: openSUSE-SU-2026:10027-1 Rating: moderate Cross-References: CVE-2023-6601 CVSS scores: CVE-2023-6601 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

ffmpeg-7-7.1.3-1.1 on GA media (moderate)

ffmpeg-7-7.1.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10028-1 Rating: moderate Cross-References: CVE-2023-6601 CVSS scores: CVE-2023-6601 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

ffmpeg:ffmpeg_AV_CODEC_ID_DXV_DEC_fuzzer: Use-of-uninitialized-value in dxt5_block_internal

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5571269310611456 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDXVDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

OPENSUSE-SU-2026:10027-1 ffmpeg-4-4.4.6-10.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.6-10.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10028-1 ffmpeg-7-7.1.3-1.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2021-33815

dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...

CVE-2021-28429

Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...

CVE-2019-11339

The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via crafted MPEG-4 video data...

CVE-2019-11338

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service NULL pointer dereference and out-of-array access or possibly have unspecified other impact via crafted HEVC data...