PT-2025-1310

Name of the Vulnerable Software and Affected Versions FFmpeg version n6.1.1 Description The issue is related to an integer overflow in the DXA demuxer of the libavformat library, potentially resulting in a denial-of-service DoS condition or other undefined behavior. Recommendations For FFmpeg...

PT-2024-27097 · Unknown +1 · Libavcodec +1

Name of the Vulnerable Software and Affected Versions: FFmpeg version 6.1.1 Description: The issue is related to an integer overflow in the WAVARC decoder of the libavcodec library when handling certain block types. This can lead to a denial-of-service DoS condition. Recommendations: For FFmpeg...

PT-2024-9897

Name of the Vulnerable Software and Affected Versions: FFmpeg version n7.0 Description: The issue is related to a Double Free error in the rkmpp retrieve frame function within the libavcodec/rkmppdec.c file of the FFmpeg multimedia library. This error can be exploited by a remote attacker to...

PT-2024-27096

Name of the Vulnerable Software and Affected Versions FFmpeg version 6.1.1 Description The issue is related to an integer overflow in the AVI demuxer of the libavformat library, potentially resulting in a denial-of-service DoS condition. Recommendations For version 6.1.1, consider updating to a...

Astra Linux – Vulnerability in ffmpeg

It was discovered that FFmpeg version n6.1.1 contains a heap use-after-free issue through the avhwframectxinit function...

SUSE-SU-2024:1907-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2020-22021: Fixed a buffer overflow vulnerability in filteredges bsc1186586 - CVE-2023-51794: Fixed a heap buffer overflow in libavfilter. bsc1223437...

FFmpeg buffer overflow vulnerability (CNVD-2024-29682)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version v.n6.1-3-g466799d4f5, which can be exploited by an attacker to execute arbitrary code via the ffbwdiffilterintrac function in the...

CVE-2024-31578

FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the avhwframectxinit function...

CVE-2024-31578

FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the avhwframectxinit function...

PT-2024-4526 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1-3-g466799d4f5 Description: The issue is related to a buffer overflow in the de stereo component of the FFmpeg library, specifically in the af dialoguenhance.c file. This allows a local attacker to execute arbitrary code an...

PT-2025-2441 · FFmpeg +2 · Ffmpeg +2

Name of the Vulnerable Software and Affected Versions: FFmpeg version n6.1.1 Description: The issue is a double-free vulnerability in the fftools/ffmpeg mux init.c component of FFmpeg, specifically within the new stream audio function. This vulnerability occurs in the audio processing component o...

SUSE CVE-2020-35964

trackheader in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing...

UBUNTU-CVE-2014-125006

A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function outputframe of the file libavcodec/h264.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this...

Design/Logic Flaw

Prior to ffmpeg version 4.3, the tty demuxer did not have a 'readprobe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim as long...

MGASA-2021-0350 Updated ffmpeg packages fix security vulnerabilities

This update provides ffmpeg version 4.3.2, which fixes several security vulnerabilities and other bugs which were corrected upstream...

MGASA-2020-0046 Updated ffmpeg packages fix security vulnerabilities

Updated ffmpeg packages fix security vulnerabilities: This update provides ffmpeg version 4.1.5, which fixes several bugs, and atleasst the follwing security vulnerabilities: In FFmpeg before 4.2, avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other...

PT-2021-10718 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: A Denial of Service issue exists due to a memory leak in the inavi add ientry function. Recommendations: For FFmpeg version 4.2, at the moment, there is no information about a newer version that contains a fix...

CVE-2019-1000016

FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbsav1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...

CVE-2019-1000016

FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbsav1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...

Information disclosure

In FFmpeg 3.2 and 4.0.1, an improper argument AVCodecParameters passed to the avprivrequestsample function in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information...