OESA-2025-1772 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A heap-use-after-free i...

ffmpeg-4-4.4.6-4.1 on GA media (moderate)

ffmpeg-4-4.4.6-4.1 on GA media Announcement ID: openSUSE-SU-2025:15215-1 Rating: moderate Cross-References: CVE-2022-1475 CVE-2024-36616 CVE-2024-36617 CVE-2024-36618 CVSS scores: CVE-2022-1475 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2024-36616 SUSE : 6.5...

ffmpeg:ffmpeg_AV_CODEC_ID_JPEG2000_DEC_fuzzer: Use-of-uninitialized-value in jpegNUMBER_bitbuf_refill_backwards

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5736930522497024 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDJPEG2000DECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

OPENSUSE-SU-2025:15215-1 ffmpeg-4-4.4.6-4.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.6-4.1 package on the GA media of openSUSE Tumbleweed...

ffmpeg:ffmpeg_AV_CODEC_ID_FFV1_DEC_fuzzer: Use-of-uninitialized-value in get_symbol_inline

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5909681623334912 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDFFV1DECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

PT-2025-33661 · Ffmpeg Team +1 · Ffmpeg +1

Уязвимость функции hls prediction unit мультимедийной библиотеки FFmpeg связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

ffmpeg:ffmpeg_AV_CODEC_ID_UTVIDEO_DEC_fuzzer: Use-of-uninitialized-value in add_median_pred_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6195630160805888 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDUTVIDEODECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_MPEG4_DEC_fuzzer: Heap-buffer-overflow in avg_h264_chroma_mc1_8_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5582608941776896 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMPEG4DECfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

ffmpeg:ffmpeg_AV_CODEC_ID_OPUS_DEC_fuzzer: Use-of-uninitialized-value in ff_silk_decode_superframe

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6646049018281984 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDOPUSDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_MAGICYUV_DEC_fuzzer: Use-of-uninitialized-value in add_left_pred_c

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6465121960656896 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMAGICYUVDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBOPUS_DEC_fuzzer: Use-of-uninitialized-value in silk_decode_core

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6253238758473728 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBOPUSDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_dem_MXG_fuzzer: Use-of-uninitialized-value in read_frame_internal

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5661938917113856 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMXGfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

Astra Linux – Vulnerability in ffmpeg

It was discovered that FFmpeg git-master, N-113007-g8d24a28d06 contains a segmentation violation through the component /libavcodec/jpeg2000dec.c...

TencentOS Server 4: ffmpeg (TSSA-2025:0093)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0093 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

The vulnerability of the `mov_read_trak` function in the libavformat library, a multimedia library within FFmpeg, allows a attacker to cause a service failure.

The vulnerability of the movreadtrak function in the libavformat library, a multimedia library within FFmpeg, is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

TencentOS Server 4: ffmpeg (TSSA-2025:0114)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0114 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: ffmpeg (TSSA-2024:0511)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0511 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

ffmpeg:ffmpeg_dem_DASH_fuzzer: Heap-buffer-overflow in xmlParsePubidLiteral

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4850228937424896 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemDASHfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x50f0000001d4 Cra...

ffmpeg:ffmpeg_AV_CODEC_ID_SANM_fuzzer: Heap-buffer-overflow in process_frame_obj

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5466731806261248 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSANMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7db5358caee4...

ffmpeg:ffmpeg_AV_CODEC_ID_DXV_fuzzer: Use-of-uninitialized-value in compress_color

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4786889444098048 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDXVfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...