PT-2025-45935

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...

PT-2025-45900

track header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing...

PT-2025-45904

dwa uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc count is not strictly checked...

PT-2025-45897

cbs jpeg split fragment in libavcodec/cbs jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG MARKER SOS handling because of a missing length check...

PT-2025-45898

FFmpeg through 4.3 has a heap-based buffer overflow in avio get str in libavformat/aviobuf.c because dnn backend native.c calls ff dnn load model native and a certain index check is omitted...

PT-2025-45940

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

PT-2025-45923

FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff gradfun blur line movdqa sse2, as demonstrated by a call to the set encoder id function in /fftools/ffmpeg enc.c component...

PT-2025-45894

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645 parse because alloc rbsp buffer in libavcodec/h2645 parse.c mishandles rbsp buffer...

PT-2025-45901

decode frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

PT-2025-45907

adts decode extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init get bits return value, which is a necessary step because the second argument to init get bits can be crafted...

PT-2025-45896

FFmpeg before 4.2 has a heap-based buffer overflow in vqa decode chunk because of an out-of-array access in vqa decode init in libavcodec/vqavideo.c...

PT-2025-45893

The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact via crafted MPEG-4 video data...

PT-2025-45929

FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder...

PT-2025-45903

Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng do inverse blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service...

PT-2025-45919

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff bwdif filter intra c function in the libavfilter/bwdifdsp.c:125:5 component...

PT-2025-45918

FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the av samples set silence function in thelibavutil/samplefmt.c:260:9 component...

PT-2025-45892

A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle open brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

PT-2025-45891

In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff htmlmarkup to ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

PT-2025-45924

A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm decode frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed...

PT-2025-45916

FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw block rectangle function of libavfilter/vf codecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service DoS via crafted input...