PT-2025-45939

A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs...

PT-2025-45913

libavcodec/pthread frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances e.g., hardware re-initialization upon a mid-video SPS change when...

PT-2025-45935

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...

PT-2025-45900

track header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing...

PT-2025-45904

dwa uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc count is not strictly checked...

PT-2025-45897

cbs jpeg split fragment in libavcodec/cbs jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG MARKER SOS handling because of a missing length check...

PT-2025-45898

FFmpeg through 4.3 has a heap-based buffer overflow in avio get str in libavformat/aviobuf.c because dnn backend native.c calls ff dnn load model native and a certain index check is omitted...

PT-2025-45940

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

PT-2025-45924

A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm decode frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed...

PT-2025-45923

FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff gradfun blur line movdqa sse2, as demonstrated by a call to the set encoder id function in /fftools/ffmpeg enc.c component...

PT-2025-45894

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645 parse because alloc rbsp buffer in libavcodec/h2645 parse.c mishandles rbsp buffer...

PT-2025-45895

In FFmpeg before 4.2, avcodec open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

PT-2025-45901

decode frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

PT-2025-45907

adts decode extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init get bits return value, which is a necessary step because the second argument to init get bits can be crafted...

PT-2025-45921

FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the av malloc function in libavutil/mem.c:105:9 component...

PT-2025-45944

A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff aac search for tns of the file libavcodec/aacenc tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely...

PT-2025-45893

The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via crafted MPEG-4 video data...

PT-2025-45905

Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim as lon...

PT-2025-45928

FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service DoS condition...

PT-2025-45938

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions...