ffmpeg:ffmpeg_AV_CODEC_ID_MAGICYUV_DEC_fuzzer: Use-of-uninitialized-value in add_left_pred_c

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6465121960656896 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDMAGICYUVDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_AV_CODEC_ID_LIBOPUS_DEC_fuzzer: Use-of-uninitialized-value in silk_decode_core

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6253238758473728 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDLIBOPUSDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_dem_MXG_fuzzer: Use-of-uninitialized-value in read_frame_internal

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5661938917113856 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMXGfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

Astra Linux – Vulnerability in ffmpeg

It was discovered that FFmpeg git-master, N-113007-g8d24a28d06 contains a segmentation violation through the component /libavcodec/jpeg2000dec.c...

TencentOS Server 4: ffmpeg (TSSA-2024:0511)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0511 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: ffmpeg (TSSA-2025:0093)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0093 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

The vulnerability of the `mov_read_trak` function in the libavformat library, a multimedia library within FFmpeg, allows a attacker to cause a service failure.

The vulnerability of the movreadtrak function in the libavformat library, a multimedia library within FFmpeg, is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

TencentOS Server 4: ffmpeg (TSSA-2025:0114)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0114 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

ffmpeg:ffmpeg_dem_DASH_fuzzer: Heap-buffer-overflow in xmlParsePubidLiteral

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4850228937424896 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemDASHfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x50f0000001d4 Cra...

ffmpeg:ffmpeg_AV_CODEC_ID_SANM_fuzzer: Heap-buffer-overflow in process_frame_obj

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5466731806261248 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSANMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7db5358caee4...

ffmpeg:ffmpeg_AV_CODEC_ID_DXV_fuzzer: Use-of-uninitialized-value in compress_color

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4786889444098048 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDDXVfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

ffmpeg:ffmpeg_AV_CODEC_ID_SHORTEN_fuzzer: Use-of-uninitialized-value in get_ur_golomb_jpegls

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5156827862466560 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSHORTENfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

ffmpeg-7-7.1.1-4.1 on GA media (moderate)

ffmpeg-7-7.1.1-4.1 on GA media Announcement ID: openSUSE-SU-2025:15177-1 Rating: moderate Cross-References: CVE-2024-36615 CVE-2024-36616 CVE-2024-36617 CVE-2024-36618 CVE-2024-36619 CVSS scores: CVE-2024-36615 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2024-36615 SUSE : 6.9...

ffmpeg:ffmpeg_AV_CODEC_ID_VVC_fuzzer: Heap-buffer-overflow in hls_palette_coding

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6436225806565376 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDVVCfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x5190000058d0...

Ubuntu: Security Advisory (USN-7538-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15177-1 ffmpeg-7-7.1.1-4.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.1.1-4.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : FFmpeg vulnerabilities (USN-7538-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7538-1 advisory. Simcha Kosman discovered that FFmpeg did not correctly handle certain return values. An...

USN-7538-1: FFmpeg vulnerabilities

Simcha Kosman discovered that FFmpeg did not correctly handle certain return values. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 24.10...

USN-7538-1 ffmpeg vulnerabilities

Simcha Kosman discovered that FFmpeg did not correctly handle certain return values. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 24.10...

The vulnerability in the avcodec/speexdec.c module of the Ffmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability in the avcodec/speexdec.c module of the FFmpeg multimedia library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...