DLA-4440-1 ffmpeg - security update

Bulletin has no description...

CVE-2025-34442

creationtimestamp| type| source ---|---|--- 2026-01-15 23:54:26+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/avideonotifyffmpegunauthrce.rb 2026-01-16 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mckypdx2ay22...

CVE-2025-34441

creationtimestamp| type| source ---|---|--- 2026-01-15 23:54:26+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/avideonotifyffmpegunauthrce.rb 2026-01-16 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mckypdty5q2f...

OPENSUSE-SU-2026:10053-1 ffmpeg-4-4.4.6-11.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.6-11.1 package on the GA media of openSUSE Tumbleweed...

Astra Linux – Vulnerability in ffmpeg

A flaw was discovered in FFmpeg’s TTY Demuxer. This vulnerability allows for potential data exfiltration through improper parsing of input files that do not comply with TTY standards in HLS playlists...

Astra Linux – Vulnerability in ffmpeg

When decoding an OpenEXR file that uses DWAA or DWAB compression, there is an implicit assumption that the height and width are divisible by 8. If the height or width of the image is not divisible by 8, the copy operation will loop at positions 0 and 1, continuing to write until a multiple of 8 i...

Astra Linux – Vulnerability in ffmpeg

There is a NULL pointer dereference vulnerability in FFmpeg’s Firequalizer filter libavfilter/affirequalizer.c. This vulnerability arises due to a missing check on the return value of avmallocarray in the configinput function. An attacker could exploit this vulnerability by tricking a victim into...

Astra Linux – Vulnerability in ffmpeg

A flaw was discovered in FFmpeg’s HLS demuxer. This vulnerability allows bypassing checks for unsafe file extensions and triggering arbitrary demuxers using base64-encoded data URIs, along with specific file extensions...

Astra Linux – Vulnerability in ffmpeg

A flaw was discovered in FFmpeg. This vulnerability allows for unexpected additional CPU load and storage consumption, potentially leading to reduced performance or denial of service due to the demuxing of arbitrary data as XBIN-format data without proper format validation...

Astra Linux – Vulnerability in ffmpeg

Integer overflow vulnerability in the yuv2ya16Xctemplate function in libswscale/output.c in FFmpeg 8.0...

ffmpeg-4-4.4.6-10.1 on GA media (moderate)

ffmpeg-4-4.4.6-10.1 on GA media Announcement ID: openSUSE-SU-2026:10027-1 Rating: moderate Cross-References: CVE-2023-6601 CVSS scores: CVE-2023-6601 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

ffmpeg-7-7.1.3-1.1 on GA media (moderate)

ffmpeg-7-7.1.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10028-1 Rating: moderate Cross-References: CVE-2023-6601 CVSS scores: CVE-2023-6601 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

OPENSUSE-SU-2026:10028-1 ffmpeg-7-7.1.3-1.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10027-1 ffmpeg-4-4.4.6-10.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.6-10.1 package on the GA media of openSUSE Tumbleweed...

CVE-2021-33815

dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...

CVE-2021-28429

Integer overflow vulnerability in avtimecodemakestring in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service DoS via crafted .mov file...

CVE-2019-11339

The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via crafted MPEG-4 video data...

CVE-2019-11338

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service NULL pointer dereference and out-of-array access or possibly have unspecified other impact via crafted HEVC data...

CVE-2020-24020

Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnnexecutelayerpad in libavfilter/dnn/dnnbackendnativelayerpad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code...

CVE-2019-18214

The VideoConverter app 0.1.0 for Nextcloud allows denial of service CPU and memory consumption via multiple concurrent conversions because many FFmpeg processes may be running at once. The workload is not queued for serial execution...