100 matches found
OPENSUSE-SU-2025:14834-1 ffmpeg-7-7.1-3.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1-3.1 package on the GA media of openSUSE Tumbleweed...
MGASA-2025-0057 Updated ffmpeg packages fix security vulnerability
A buffer overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service DoS via afdialoguenhance.c:261:5 in the destereo component. CVE-2023-49528...
[SECURITY] [DLA 4039-1] ffmpeg security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4039-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz February 01, 2025 https://wiki.debian.org/LTS -...
CVE-2023-6605
CVE-2023-6605 affects FFmpeg’s DASH playlist handling. A crafted DASH playlist with malicious URLs can trigger SSRF (arbitrary HTTP GETs) from the host running FFmpeg. Public advisories in connected docs (Debian DLA-4241, Mageia advisory, Ubuntu USN-7830-1, Alpine Linux page) confirm a DASH SSRF ...
CVE-2023-6601
A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions...
CVE-2023-6603 Ffmpeg: null pointer dereference in ffmpeg hls parsing
A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...
PT-2024-26463 · FFmpeg +2 · Ffmpeg +2
Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1.1 Description: A potential security issue exists in FFmpeg due to insufficient validation of certain parameters when parsing Speex codec extradata. This could lead to integer overflow conditions, resulting in undefined...
MGASA-2024-0283 Updated ffmpeg packages fix security vulnerabilities
A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnmdecodeframe in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed t...
OESA-2024-1804 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: adtsdecodeextradata in...
MGASA-2024-0248 Updated ffmpeg packages fix security vulnerabilities
Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the setencoderid function in /fftools/ffmpegenc.c component. CVE-2023-50010 Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary...
OESA-2024-1761 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A null pointer...
OPENSUSE-SU-2024:10243-1 ffmpeg-3.2.2-1.1 on GA media
These are all security issues fixed in the ffmpeg-3.2.2-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE-SU-2024:1593-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2023-50010: Fixed an arbitrary code execution via the setencoderid bsc1223256...
SUSE-SU-2024:1468-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2024-31578: Fixed heap use-after-free via avhwframectxinit when vulkanframes init failed bsc1223070 - CVE-2023-49502: Fixed heap buffer overflow via the ffbwdiffilterintrac function in libavfilter/bwdifdsp.c bsc1223235 Adding references for...
PT-2024-4524 · FFmpeg +3 · Ffmpeg +3
Name of the Vulnerable Software and Affected Versions: FFmpeg versions prior to the fixed version Description: The issue is related to a buffer overflow vulnerability in the ff gaussian blur 8 function, located in libavfilter/edge template.c, which can allow a local attacker to execute arbitrary...
SUSE-SU-2023:2115-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2019-13390: Fixed a potential crash when processing a crafted AVI stream bsc1140754. - CVE-2022-3341: Fixed a potential crash when processing a crafted NUT stream bsc1206778. - CVE-2022-48434: Fixed use after free in libavcodec/pthreadframe...
SUSE-SU-2023:2108-1 Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2022-48434: Fixed use after free in libavcodec/pthreadframe.c bsc1209934...
SUSE-SU-2023:0172-1 Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2022-3341: Fixed a potential crash when processing a crafted NUT stream bsc1206778...
MGASA-2023-0004 Updated ffmpeg packages fix security vulnerability
An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability. CVE-2022-3109...