10853 matches found
JLSEC-2025-108 `cbs_jpeg_split_fragment` in `libavcodec/cbs_jpeg.c` in FFmpeg 4.1 and 4.2.2 has a heap-based buffer...
cbsjpegsplitfragment in libavcodec/cbsjpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEGMARKERSOS handling because of a missing length check...
JLSEC-2025-140 FFmpeg n6.1.1 is Integer Overflow
FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parseoptions function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds...
JLSEC-2025-129 Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...
Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ffbwdiffilterintrac function in the libavfilter/bwdifdsp.c:125:5 component...
JLSEC-2025-147 A flaw was found in FFmpeg's DASH playlist support
A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs...
JLSEC-2025-117 FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion...
FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 suffers from a an assertion failure at src/libavutil/mathematics.c...
JLSEC-2025-152 ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function `iamf_read_header` in...
ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamfreadheader in /libavformat/iamfdec.c...
JLSEC-2025-121 An issue was discovered in the FFmpeg package, where `vp3_decode_frame` in `libavcodec/vp3.c` lacks...
An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability...
JLSEC-2025-124 An issue was discovered in `decode_frame` in `libavcodec/tiff.c` in FFmpeg version 4.3, allows...
An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...
JLSEC-2025-148 A flaw was found in FFmpeg
A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...
PT-2025-45932
FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds...
PT-2025-45912
A null pointer dereference issue was discovered in 'FFmpeg' in decode main header function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat new stream and triggers the null pointer dereference error, causing an application to crash...
PT-2025-45915
FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av hwframe ctx init function...
PT-2025-45917
FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf showspectrum.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2025-45936
FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg mux init.c component of FFmpeg, specifically within the new stream audio function...
PT-2025-45910
A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument y size leads to out-of-bounds read. It is possible to initiate the attack remotely. The...
PT-2025-45902
FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...
PT-2025-45926
FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service DoS condition...
PT-2025-45911
An issue was discovered in the FFmpeg package, where vp3 decode frame in libavcodec/vp3.c lacks check of the return value of av malloc and will cause a null pointer dereference, impacting availability...