SUSE-SU-2025:1450-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2025-22921: Clear array length when freeing it. bsc1237382 - CVE-2025-0518: Fix memory data leak when use sscanf. bsc1236007 - CVE-2025-22919: Check for valid sample rate, to fix the invalid sample rate = 0. bsc1237371 - CVE-2024-12361: Add...

CVE-2024-55069

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamfreadheader in /libavformat/iamfdec.c...

CVE-2024-55069

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamfreadheader in /libavformat/iamfdec.c...

DEBIAN-CVE-2024-55069

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamfreadheader in /libavformat/iamfdec.c...

UBUNTU-CVE-2024-55069

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamfreadheader in /libavformat/iamfdec.c...

CVE-2024-55069

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamfreadheader in /libavformat/iamfdec.c...

PT-2025-18924 · FFmpeg +1 · Ffmpeg +1

Name of the Vulnerable Software and Affected Versions: ffmpeg version 7.1 Description: The issue is related to a Null Pointer Dereference in the iamf read header function located in /libavformat/iamfdec.c. This is a general information about the problem, but specific details about the number of...

CVE-2024-55069

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamfreadheader in /libavformat/iamfdec.c...

CVE-2024-55069

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamfreadheader in /libavformat/iamfdec.c...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 7.1, which stems from a null pointer dereference in the iamfreadheader function...

CVE-2024-55069

CVE-2024-55069 : FFmpeg 7.1 is reported to be vulnerable to a Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c. The connected documents confirm the affected component and the root cause (nullptr dereference in iamf_read_header) but do not supply patch versions or re...

CVE-2024-55069

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamfreadheader in /libavformat/iamfdec.c...

ROS-20250430-02

A vulnerability in the libavformat/westwoodvqa.c component of the FFmpeg multimedia library is related to an integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service using a specially crafted VQA file FFmpeg multimedia library...

ffmpeg-6-6.1.2-4.1 on GA media (moderate)

ffmpeg-6-6.1.2-4.1 on GA media Announcement ID: openSUSE-SU-2025:15012-1 Rating: moderate Cross-References: CVE-2023-50010 CVE-2024-36613 CVSS scores: CVE-2023-50010 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2024-36613 SUSE : 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L...

OPENSUSE-SU-2025:15012-1 ffmpeg-6-6.1.2-4.1 on GA media

These are all security issues fixed in the ffmpeg-6-6.1.2-4.1 package on the GA media of openSUSE Tumbleweed...

ffmpeg-6-6.1.2-3.1 on GA media (moderate)

ffmpeg-6-6.1.2-3.1 on GA media Announcement ID: openSUSE-SU-2025:15010-1 Rating: moderate Cross-References: CVE-2023-22656 CVE-2023-45221 CVE-2023-47169 CVE-2023-47282 CVE-2023-48368 CVE-2023-51793 CVE-2023-51798 CVE-2024-12361 CVE-2024-35365 CVE-2024-35368 CVE-2025-0518 CVE-2025-22919...

OPENSUSE-SU-2025:15010-1 ffmpeg-6-6.1.2-3.1 on GA media

These are all security issues fixed in the ffmpeg-6-6.1.2-3.1 package on the GA media of openSUSE Tumbleweed...

Argument Injection

Overview Affected versions of this package are vulnerable to Argument Injection via the FFmpeg codec. An attacker in possession of a valid itemId can execute arbitrary code by injecting unsanitized parameters at the /Videos//stream or /Videos//stream. endpoints. Remediation Upgrade...

CVE-2025-31499

Jellyfin is an open source self hosted media server. Versions before 10.10.7 are vulnerable to argument injection in FFmpeg. This can be leveraged to possibly achieve remote code execution by anyone with credentials to a low-privileged user. This vulnerability was previously reported in...

CVE-2025-31499

Jellyfin is an open source self hosted media server. Versions before 10.10.7 are vulnerable to argument injection in FFmpeg. This can be leveraged to possibly achieve remote code execution by anyone with credentials to a low-privileged user. This vulnerability was previously reported in...