PT-2025-45943

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function mov read trak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. Th...

PT-2025-45891

In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff htmlmarkup to ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

PT-2025-45906

FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 suffers from a an assertion failure at src/libavutil/mathematics.c...

PT-2025-45892

A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle open brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

PT-2025-45896

FFmpeg before 4.2 has a heap-based buffer overflow in vqa decode chunk because of an out-of-array access in vqa decode init in libavcodec/vqavideo.c...

PT-2025-45898

FFmpeg through 4.3 has a heap-based buffer overflow in avio get str in libavformat/aviobuf.c because dnn backend native.c calls ff dnn load model native and a certain index check is omitted...

PT-2025-45925

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill audiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versi...

PT-2025-45930

An integer overflow in the component /libavformat/westwood vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file...

PT-2025-45928

FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service DoS condition...

PT-2025-45944

A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff aac search for tns of the file libavcodec/aacenc tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely...

PT-2025-45901

decode frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

PT-2025-45924

A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm decode frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed...

PT-2025-45923

FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff gradfun blur line movdqa sse2, as demonstrated by a call to the set encoder id function in /fftools/ffmpeg enc.c component...

PT-2025-45894

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645 parse because alloc rbsp buffer in libavcodec/h2645 parse.c mishandles rbsp buffer...

PT-2025-45921

FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the av malloc function in libavutil/mem.c:105:9 component...

PT-2025-45912

A null pointer dereference issue was discovered in 'FFmpeg' in decode main header function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat new stream and triggers the null pointer dereference error, causing an application to crash...

PT-2025-45907

adts decode extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init get bits return value, which is a necessary step because the second argument to init get bits can be crafted...

PT-2025-45915

FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av hwframe ctx init function...

PT-2025-45945

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf read header in /libavformat/iamfdec.c...

PT-2025-45941

Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af pan.C . This issue affects FFmpeg: 7.1. Issue was fixed: ...