[SECURITY] [DSA 5985-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5985-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 25, 2025 https://www.debian.org/security/faq -...

SUSE SLED15: ffmpeg-4 / ffmpeg-4-libavcodec-devel / ffmpeg-4-libavdevice-devel / etc (SUSE-SU-2025:02381-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02381-1 advisory. - CVE-2024-36618: Fixed integer overflow iff ULONGMAX INT64MAX bsc1234020. New CVE references,...

Debian dla-4241 : ffmpeg - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4241 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4241-1 [email protected]...

TencentOS Server 4: ffmpeg (TSSA-2024:0511)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0511 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : FFmpeg vulnerabilities (USN-7538-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7538-1 advisory. Simcha Kosman discovered that FFmpeg did not correctly handle certain return values. An...

USN-7538-1: FFmpeg vulnerabilities

Simcha Kosman discovered that FFmpeg did not correctly handle certain return values. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 24.10...

CVE-2012-2785

Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors, related to 1 "some subframes only encode some channels" or 2 a large order value...

CVE-2011-2162

Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 aka CS4.0; and Mandriva Enterprise Server 5 aka MES5 have unknown impact and attack vectors, related to issues...

CVE-2012-2795

Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors related to 1 size of "mclms arrays," 2 "a getbits0 in decodeacfilter," and 3 "too many bits in decodechannelresidues."...

SUSE SLED15: ffmpeg / ffmpeg-private-devel / libavcodec-devel / libavcodec57 / etc (SUSE-SU-2025:1450-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1450-1 advisory. - CVE-2025-22921: Clear array length when freeing it. bsc1237382 - CVE-2025-0518: Fix memory dat...

ROS-20250430-02

A vulnerability in the libavformat/westwoodvqa.c component of the FFmpeg multimedia library is related to an integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service using a specially crafted VQA file FFmpeg multimedia library...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ffmpeg-4 (SUSE-SU-2025:0958-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0958-1 advisory. - CVE-2022-48434: Fixed use after free in libavcodec/pthreadframe.c bsc1209934 - CVE-2020-22021:...

SUSE-SU-2025:0862-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2025-22921: Fixed segmentation violation in NULL pointer dereference via the component /libavcodec/jpeg2000dec.c bsc1237382. - CVE-2025-25473: Fixed memory leak in avformatfreecontext bsc1237351. - CVE-2025-0518: Fixed unchecked sscanf...

Fedora 41 : ffmpeg (2025-ab5fe60520)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ab5fe60520 advisory. Latest maintenance release from 7.1 branch. Changelog: https://github.com/FFmpeg/FFmpeg/blob/n7.1.1/Changelog . Contains backported fix for...

ffmpeg-7-7.1-3.1 on GA media (moderate)

ffmpeg-7-7.1-3.1 on GA media Announcement ID: openSUSE-SU-2025:14834-1 Rating: moderate Cross-References: CVE-2024-12361 CVE-2024-35365 CVE-2024-36613 CVE-2025-0518 CVE-2025-22919 CVE-2025-22920 CVE-2025-22921 CVE-2025-25473 CVSS scores: CVE-2024-12361 SUSE : 4...

ffmpeg-4-4.4.5-3.1 on GA media (moderate)

ffmpeg-4-4.4.5-3.1 on GA media Announcement ID: openSUSE-SU-2025:14833-1 Rating: moderate Cross-References: CVE-2024-12361 CVE-2024-36613 CVE-2025-0518 CVE-2025-22919 CVE-2025-22921 CVE-2025-25473 CVSS scores: CVE-2024-12361 SUSE : 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2024-12361 SUS...

Updated ffmpeg packages fix security vulnerabilities

A buffer overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ffbwdiffilterintrac function in the libavfilter/bwdifdsp.c:125:5 component. CVE-2023-49502 FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the...

[SECURITY] [DLA 3928-1] ffmpeg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3928-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 21, 2024 https://wiki.debian.org/LTS -...

Slackware Linux 15.0 ffmpeg Multiple Vulnerabilities (SSA:2024-235-01)

The version of ffmpeg installed on the remote host is prior to 4.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-235-01 advisory. New ffmpeg packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the preceding description...

[SECURITY] [DSA 5748-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5748-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 14, 2024 https://www.debian.org/security/faq -...