10860 matches found
PT-2025-45936
FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg mux init.c component of FFmpeg, specifically within the new stream audio function...
PT-2025-45910
A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument y size leads to out-of-bounds read. It is possible to initiate the attack remotely. The...
PT-2025-45902
FFmpeg =4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution...
PT-2025-45926
FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service DoS condition...
PT-2025-45914
An issue was discovered in decode frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...
PT-2025-45922
FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow via the ff gaussian blur 8 function in libavfilter/edge template.c:116:5 component...
PT-2025-45927
In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in...
PT-2025-45895
In FFmpeg before 4.2, avcodec open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...
PT-2025-45890
FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbs av1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in...
PT-2025-45943
A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function mov read trak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. Th...
PT-2025-45906
FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 suffers from a an assertion failure at src/libavutil/mathematics.c...
PT-2025-45925
A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill audiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in versi...
PT-2025-45930
An integer overflow in the component /libavformat/westwood vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file...
PT-2025-45945
ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf read header in /libavformat/iamfdec.c...
PT-2025-45941
Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af pan.C . This issue affects FFmpeg: 7.1. Issue was fixed: ...
PT-2025-45908
An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729 parse in llibavcodec/g729 parser.c when processing a specially crafted file...
PT-2025-45939
A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs...
PT-2025-45913
libavcodec/pthread frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances e.g., hardware re-initialization upon a mid-video SPS change when...
PT-2025-45935
A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...