7944 matches found
CVE-2024-36617
FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder...
CVE-2024-36617
CVE-2024-36617 affects FFmpeg n6.1.1 with an integer overflow in the CAF decoder. The CVSS gives a MEDIUM overall risk (6.2), attack vector LOCAL, requiring no user interaction, with the impact limited to availability (I=NONE, A=HIGH). The vulnerability is tied to the FFmpeg CAF demux/decoder cod...
CVE-2024-36619
FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service DoS condition...
CVE-2024-35367
FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dspaltivec.c, static const vecs8 hsubpelfiltersouter...
CVE-2024-36617
FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder...
CVE-2024-35368
FFmpeg n7.0 is affected by a Double Free via the rkmppretrieveframe function within libavcodec/rkmppdec.c...
CVE-2024-35369
In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in...
CVE-2024-36615
FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread...
CVE-2024-35368
FFmpeg n7.0 is affected by CVE-2024-35368: a Double Free in the rkmpp_retrieve_frame function of libavcodec/rkmppdec.c. Connected advisories indicate mitigations exist: SUSE SU-2025-0862-1 and SUSE SU-2025-1128-1 note fixing CVE-2024-35368 in FFmpeg, and Debian DSA-5985-1 lists CVE-2024-35368 amo...
CVE-2024-35366
CVE-2024-35366 affects FFmpeg v6.1.1. The vulnerability is in the parse_options function of sbgdec.c in the libavformat module, where certain inputs are not properly validated. This can allow negative duration values to be accepted without bounds checking, leading to an integer overflow and poten...
CVE-2024-36617
FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder...
CVE-2024-35368
FFmpeg n7.0 is affected by a Double Free via the rkmppretrieveframe function within libavcodec/rkmppdec.c...
CVE-2024-36618
FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service DoS condition...
The vulnerability of the copy_column function (libavfilter/vf_tiltandshift.c) in the FFmpeg multimedia library allows a attacker to execute arbitrary code.
The vulnerability of the copycolumn function libavfilter/vftiltandshift.c in the FFmpeg multimedia library is related to buffer overflow in the “queue” component. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Astra Linux – Vulnerability in ffmpeg
FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideoenc.c:1216:21 in loadinputpicture in FFmpeg7.0...
Astra Linux – Vulnerability in ffmpeg
FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder...
Astra Linux – Vulnerability in ffmpeg
An integer overflow in the component /libavformat/westwoodvqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application through a malicious VQA file...
Astra Linux – Vulnerability in ffmpeg
FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library, which allows for an integer overflow. This could potentially lead to a denial-of-service DoS attack or other undefined behaviors...
Astra Linux – Vulnerability in ffmpeg
It was discovered that FFmpeg version n6.1.1 contains a heap use-after-free issue through the avhwframectxinit function...
Astra Linux – Vulnerability in ffmpeg
FFmpeg n6.1.1 has an integer overflow vulnerability. The vulnerability resides in the parseoptions function in the sbgdec.c file, within the libavformat module. When parsing certain options, the software does not properly validate the input. This allows negative duration values to be accepted...