CLEANSTART-2024-NM17864 In FFmpeg 4

Security vulnerability affects the ffmpeg4 package. In FFmpeg 4...

CLEANSTART-2024-TP71502 In FFmpeg 4

Security vulnerability affects the ffmpeg4 package. In FFmpeg 4...

CLEANSTART-2024-JA68516 Buffer Overflow vulnerability in FFMpeg 4

Security vulnerability affects the ffmpeg4 package. Buffer Overflow vulnerability in FFMpeg 4...

CLEANSTART-2024-DJ59704 Denial of Service vulnerability exists in FFmpeg 4

Security vulnerability affects the ffmpeg4 package. A Denial of Service vulnerability exists in FFmpeg 4...

CLEANSTART-2024-LO98528 Denial of Service vulnerability exists in FFmpeg 4

Security vulnerability affects the ffmpeg4 package. A Denial of Service vulnerability exists in FFmpeg 4...

CLEANSTART-2024-MJ52124 Buffer Overflow vulnerability exists in FFmpeg 4

Security vulnerability affects the ffmpeg4 package. Buffer Overflow vulnerability exists in FFmpeg 4...

CLEANSTART-2024-VV92296 Denial of Service vulnerability exists in FFmpeg 4

Security vulnerability affects the ffmpeg4 package. A Denial of Service vulnerability exists in FFmpeg 4...

CLEANSTART-2024-UK20758 Buffer Overflow vulnerability in FFmpeg 4

Security vulnerability affects the ffmpeg4 package. Buffer Overflow vulnerability in FFmpeg 4...

[SECURITY] Fedora 44 Update: ffmpeg-8.1.3-1.fc44

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

Fedora 44 : ffmpeg (2026-3e109a0c85)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3e109a0c85 advisory. Latest upstream bugfix release from 8.1 branch. Changes: https://code.ffmpeg.org/FFmpeg/FFmpeg/src/branch/release/8.1/Changelog . Tenable has...

ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.

A flaw was found in FFmpeg, a widely used multimedia framework. This vulnerability, a heap buffer overflow in the VobSub subtitle demuxer, allows a remote attacker to corrupt memory. By providing a specially crafted subtitle file, an attacker can trigger unbounded writes, which could lead to...

ffmpeg: FFmpeg: Remote code execution via out-of-bounds write in MagicYUV decoder

A flaw was found in FFmpeg's libavcodec library. This out-of-bounds write vulnerability, specifically within the MagicYUV decoder, could allow a remote attacker to execute arbitrary code on the affected system. In other scenarios, it may lead to a denial-of-service, making the system unavailable...

Moderate: Red Hat Security Advisory: RHEL AI 3.0 RPM runtime CVE fix - ffmpeg

AIPCC Security Alerts identified CVEs in the 3.0 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter

A flaw was found in FFmpeg. A remote attacker can exploit a heap out-of-bounds write vulnerability within the vfhqdn3d filter by providing a specially crafted video file. When filtergraph reinitialization is disabled, the filter allocates undersized memory buffers for video frames. Subsequent...

FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files

A flaw was found in FFmpeg. A remote attacker could exploit an out-of-bounds memory access vulnerability in the ADX audio decoder by supplying a specially crafted ADX or AAX audio file. This could lead to the attacker triggering both out-of-bounds reads and writes, potentially resulting in...

FFmpeg: FFmpeg: Integer overflow and out-of-bounds write via CENC subsample data

A flaw was found in FFmpeg. This vulnerability, stemming from an integer overflow and a subsequent out-of-bounds write during the processing of Common Encryption CENC subsample data, could allow a local attacker to potentially trigger information disclosure, data corruption, or a denial of servic...

ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file

A flaw was found in FFmpeg. A remote attacker could exploit a signed integer overflow vulnerability in the MACE6 audio decoder by providing a specially crafted CAF Core Audio Format file. This malicious file manipulates the bytesperpacket value, leading to an undersized memory allocation and a he...

FFmpeg: Denial of Service via crafted RTP/ASF stream

A flaw was found in FFmpeg. A remote attacker can exploit an infinite loop vulnerability in the RTP/ASF demuxer by sending a specially crafted stream. This vulnerability occurs because the rtpasffixheader function does not properly validate the size of data chunks, preventing the processing loop...

FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream

A flaw was found in FFmpeg's RASC video decoder. A remote attacker could exploit this by providing a crafted media stream using the RASC FourCC Four Character Code, which is then decoded by libavcodec. This vulnerability triggers a bitstream-controlled out-of-bounds heap write and an adjacent...

OESA-2026-4146 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A memory corruption...