SUSE-SU-2025:02972-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2024-36618: Fixed integer overflow iff ULONGMAX INT64MAX bsc1234020. - CVE-2025-7700: Fixed potential NULL pointer dereference bsc1246790...

PT-2025-34721 · Undefined · Undefined

🚨 Patch Alert for SUSE Linux! FFmpeg vuln CVE-2024-57497 patched. Moderate-severity heap overflow could lead to DoS/code execution. Essential for sysadmins in media processing. Read more: 👉 https://t.co/aTUs6FdrrS Security https://t.co/Mzz41kxcbA...

FFmpeg 代码问题漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A code issue vulnerability exists in FFmpeg that originates from an attacker being able to force a null pointer to be dereferenced, potentially resulting in a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2015-8365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The smkadecodeframe function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is...

Linux Distros Unpatched Vulnerability : CVE-2016-10191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote...

Linux Distros Unpatched Vulnerability : CVE-2017-7865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideodecodeblockopcode0xA function in...

Debian dsa-5985 : ffmpeg - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5985 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5985-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2015-8364

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the ffiviinitplanes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers...

Linux Distros Unpatched Vulnerability : CVE-2018-13303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In FFmpeg 4.0.1, a missing check for failure of a call to initgetbits8 in the avprivac3parseheader function in libavcodec/ac3parser.c may trigger a NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2015-6823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The allocatebuffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize certain context data, which allows remote attackers to cause a deni...

Linux Distros Unpatched Vulnerability : CVE-2015-1207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and...

Linux Distros Unpatched Vulnerability : CVE-2015-6820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ffsbrapply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a matching AAC frame syntax element before proceeding with Spectral Ban...

Linux Distros Unpatched Vulnerability : CVE-2017-9996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cdxldecodeframe function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before...

Linux Distros Unpatched Vulnerability : CVE-2015-1872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment,...

Linux Distros Unpatched Vulnerability : CVE-2017-9992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the decodedds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, a...

Linux Distros Unpatched Vulnerability : CVE-2018-7751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The svgprobe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service Infinite Loop via a crafted XML file...

Linux Distros Unpatched Vulnerability : CVE-2015-6824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The swsinitcontext function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize certain pixbuf data structures, which allows remote attackers to...

Linux Distros Unpatched Vulnerability : CVE-2015-6826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ffrv34decodeinitthreadcopy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers...

Linux Distros Unpatched Vulnerability : CVE-2018-1999013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free vulnerability in the realmedia demuxer that can result in vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2012-6617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The preparesdpdescription function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service crash via vectors related to the rt...