Lucene search
+L

1080 matches found

Vulnrichment
Vulnrichment
added 2025/01/06 4:41 p.m.9 views

CVE-2023-6601 Ffmpeg: hls unsafe file extension bypass in ffmpeg

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions...

4.7CVSS6.9AI score0.00405EPSS
SaveExploits1References1
CVE
CVE
added 2025/01/06 4:41 p.m.315 views

CVE-2023-6601

CVE-2023-6601 is a vulnerability in FFmpeg’s HLS demuxer that enables bypassing unsafe file extension checks and triggering arbitrary demuxers via base64 data URIs with specific extensions. Public details in the provided connected advisories attribute the issue to FFmpeg and acknowledge fixes in ...

4.7CVSS4.8AI score0.00405EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/01/06 4:41 p.m.28 views

CVE-2023-6601 Ffmpeg: hls unsafe file extension bypass in ffmpeg

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions...

4.7CVSS0.00405EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/01/06 12:00 a.m.8 views

PT-2025-1563 · FFmpeg +1 · Ffmpeg +1

Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: A flaw was found in FFmpeg, allowing unexpected additional CPU load and storage consumption. This can lead to degraded performance or denial of service via the demuxing of arbitrary data as...

7.2CVSS6.2AI score0.00517EPSS
SaveExploits3References18
CNNVD
CNNVD
added 2025/01/06 12:00 a.m.12 views

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg that originates from an insecure file extension check that can be bypassed to trigger an arbitrary demultiplexer by appending a base64-encoded dat...

4.7CVSS6.4AI score0.00405EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/01/06 12:00 a.m.11 views

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg that originates from allowing arbitrary HTTP GET requests to be sent via a crafted DASH playlist containing a malicious URL...

7.2CVSS6.3AI score0.00376EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/01/03 10:18 p.m.22 views

CVE-2024-36613

FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service DoS condition or other undefined behavior...

3.9CVSS6.9AI score0.00276EPSS
SaveExploits0References6
NVD
NVD
added 2025/01/03 6:15 p.m.24 views

CVE-2024-36613

FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service DoS condition or other undefined behavior...

6.2CVSS0.00276EPSS
SaveExploits0References3
NVD
NVD
added 2025/01/03 6:15 p.m.17 views

CVE-2024-35365

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpegmuxinit.c component of FFmpeg, specifically within the newstreamaudio function...

8.8CVSS0.00681EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/01/03 12:00 a.m.30 views

CVE-2024-35365

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpegmuxinit.c component of FFmpeg, specifically within the newstreamaudio function...

0.00681EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/03 12:00 a.m.10 views

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version n6.1.1, which originates from a double release vulnerability in the newstreamaudio function in the fftools/ffmpegmuxinit.c component...

8.8CVSS5.9AI score0.00681EPSS
SaveExploits0References5
CVE
CVE
added 2025/01/03 12:00 a.m.106 views

CVE-2024-36613

FFmpeg n6.1.1 is affected by CVE-2024-36613 due to an integer overflow in the DXA demuxer of libavformat, potentially enabling DoS or other undefined behavior. Public advisories (SUSE SUSE-SU-2025:1128-1 and its openSUSE/SLES updates) confirm a fix for this vulnerability in FFmpeg releases (DXA d...

6.2CVSS7.2AI score0.00276EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2025/01/03 12:00 a.m.57 views

CVE-2024-36613

FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service DoS condition or other undefined behavior...

0.00276EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/01/03 12:00 a.m.14 views

CVE-2024-36613

FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service DoS condition or other undefined behavior...

6.4AI score0.00276EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/03 12:00 a.m.11 views

CVE-2024-35365

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpegmuxinit.c component of FFmpeg, specifically within the newstreamaudio function...

8.8CVSS6.7AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/01/02 12:00 a.m.17 views

PT-2025-6968

Name of the Vulnerable Software and Affected Versions: FFmpeg git-master, N-113007-g8d24a28d06 Description: A segmentation violation was discovered in the component /libavcodec/jpeg2000dec.c. Recommendations: At the moment, there is no information about a newer version that contains a fix for thi...

9.8CVSS7AI score0.01681EPSS
SaveExploits15References113
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.9 views

PT-2025-31051

Name of the Vulnerable Software and Affected Versions ffmpeg affected versions not specified Description A null pointer dereference issue exists in the FFmpeg ALS decoder, specifically within the libavcodec/alsdec.c file. This can lead to crashes or unexpected behavior when processing audio...

8.7CVSS6.7AI score0.00555EPSS
SaveExploits2References57
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.3 views

PT-2025-45644

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 7:7.1.2-0+deb13u1 Description The FFmpeg multimedia framework contains flaws that may lead to a denial of service or the potential execution of arbitrary code when processing improperly formed files or streams...

5.5CVSS6.8AI score0.00149EPSS
SaveExploits0References14
NVD
NVD
added 2024/12/31 3:15 p.m.25 views

CVE-2023-6603

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...

7.5CVSS0.00555EPSS
SaveExploits1References1
NVD
NVD
added 2024/12/31 3:15 p.m.21 views

CVE-2023-6602

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists...

5.3CVSS0.00517EPSS
SaveExploits1References2
Rows per page
Query Builder