PT-2025-45927

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in...

PT-2025-45937

FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service DoS condition or other undefined behavior...

PT-2025-45933

FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp altivec.c, static const vec s8 h subpel filters outer...

PT-2025-45916

FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw block rectangle function of libavfilter/vf codecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service DoS via crafted input...

PT-2025-45929

FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder...

PT-2025-45918

FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the av samples set silence function in thelibavutil/samplefmt.c:260:9 component...

PT-2025-45919

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff bwdif filter intra c function in the libavfilter/bwdifdsp.c:125:5 component...

PT-2025-45890

FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbs av1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...

PT-2025-45903

Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng do inverse blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service...

PT-2025-45943

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function mov read trak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. Th...

PT-2025-45891

In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff htmlmarkup to ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

PT-2025-45906

FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 suffers from a an assertion failure at src/libavutil/mathematics.c...

PT-2025-45892

A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle open brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

PT-2025-45896

FFmpeg before 4.2 has a heap-based buffer overflow in vqa decode chunk because of an out-of-array access in vqa decode init in libavcodec/vqavideo.c...

PT-2025-45925

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill audiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versi...

PT-2025-45930

An integer overflow in the component /libavformat/westwood vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file...

PT-2025-45945

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf read header in /libavformat/iamfdec.c...

PT-2025-45941

Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af pan.C . This issue affects FFmpeg: 7.1. Issue was fixed: ...

PT-2025-45908

An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729 parse in llibavcodec/g729 parser.c when processing a specially crafted file...

PT-2025-45939

A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs...