FFmpeg: undisclosed vulnerability (ZAI-2026-62S7M2)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-2KHEX5)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-E55ZBA)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-CIQ7I6)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-9NBVIP)

Not disclosed. Details are not yet publicly disclosed...

ffmpeg:ffmpeg_AV_CODEC_ID_VVC_fuzzer: Use-of-uninitialized-value in set_qp_c

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4957602162475008 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

EUVD-2022-55936

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated vulnerability that allows remote attackers to access live radio stream information through webplay or ffmpeg scripts. Attackers can exploit the vulnerability by calling specific web scripts to disclose radio stream...

CVE-2022-50790

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated vulnerability that allows remote attackers to access live radio stream information through webplay or ffmpeg scripts. Attackers can exploit the vulnerability by calling specific web scripts to disclose radio stream...

CVE-2022-50790

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated vulnerability that allows remote attackers to access live radio stream information through webplay or ffmpeg scripts. Attackers can exploit the vulnerability by calling specific web scripts to disclose radio stream...

CVE-2022-50790 SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Radio Stream Disclosure

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated vulnerability that allows remote attackers to access live radio stream information through webplay or ffmpeg scripts. Attackers can exploit the vulnerability by calling specific web scripts to disclose radio stream...

OESA-2025-2905 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

OESA-2025-2907 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

ffmpeg:ffmpeg_dem_IAMF_fuzzer: Heap-buffer-overflow in parse_coupled_substream

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6363647720095744 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemIAMFfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRIT...

PT-2025-54238

Name of the Vulnerable Software and Affected Versions SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below Description A vulnerability exists that allows remote attackers to access live radio stream information without authentication. Attackers can exploit this by calling specific web scripts to...

CVE-2022-50790: Missing Authentication for Critical Function

SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an unauthenticated vulnerability that allows remote attackers to access live radio stream information through webplay or ffmpeg scripts. Attackers can exploit the vulnerability by calling specific web scripts to disclose radio stream...

ffmpeg:ffmpeg_AV_CODEC_ID_DCA_DEC_fuzzer: Use-of-uninitialized-value in get_rice

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6433045331902464 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDCADECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBOPUS_DEC_fuzzer: Use-of-uninitialized-value in silk_decode_core

Detailed Report: https://oss-fuzz.com/testcase?key=4980177013899264 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBOPUSDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: silkdecodecore...

ffmpeg:ffmpeg_AV_CODEC_ID_VVC_fuzzer: Use-of-uninitialized-value in ff_vvc_coding_tree_unit

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5559190816096256 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDVVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_dem_SCD_fuzzer: Use-of-uninitialized-value in scd_read_table

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5328203515494400 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemSCDfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_dem_SEGAFILM_fuzzer: Use-of-uninitialized-value in film_read_header

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4738726971637760 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemSEGAFILMfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...