PT-2025-45941

Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af pan.C . This issue affects FFmpeg: 7.1. Issue was fixed: ...

PT-2025-45945

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf read header in /libavformat/iamfdec.c...

PT-2025-45934

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists...

PT-2025-45917

FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf showspectrum.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2025-45915

FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av hwframe ctx init function...

PT-2025-45936

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg mux init.c component of FFmpeg, specifically within the new stream audio function...

PT-2025-45910

A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument y size leads to out-of-bounds read. It is possible to initiate the attack remotely. The...

PT-2025-45911

An issue was discovered in the FFmpeg package, where vp3 decode frame in libavcodec/vp3.c lacks check of the return value of av malloc and will cause a null pointer dereference, impacting availability...

PT-2025-45914

An issue was discovered in decode frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...

PT-2025-45926

FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service DoS condition...

PT-2025-45922

FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow via the ff gaussian blur 8 function in libavfilter/edge template.c:116:5 component...

PT-2025-45939

A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs...

PT-2025-45935

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...

PT-2025-45908

An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729 parse in llibavcodec/g729 parser.c when processing a specially crafted file...

PT-2025-45897

cbs jpeg split fragment in libavcodec/cbs jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG MARKER SOS handling because of a missing length check...

PT-2025-45904

dwa uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc count is not strictly checked...

PT-2025-45900

track header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing...

PT-2025-45893

The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via crafted MPEG-4 video data...

PT-2025-45902

FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...

PT-2025-45913

libavcodec/pthread frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances e.g., hardware re-initialization upon a mid-video SPS change when...