7847 matches found
CVE-2024-36615
FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread...
CVE-2024-36616
An integer overflow in the component /libavformat/westwoodvqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file...
FFmpeg 安全漏洞
FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version n6.1.1, which stems from the presence of an out-of-bounds read...
CVE-2024-35367
FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dspaltivec.c, static const vecs8 hsubpelfiltersouter...
PT-2024-27095 · FFmpeg +1 · Ffmpeg +1
Name of the Vulnerable Software and Affected Versions: FFmpeg version n7.0 Description: The issue is related to a race condition in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while bein...
CVE-2024-36616
An integer overflow in the component /libavformat/westwoodvqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file...
CVE-2024-36617
CVE-2024-36617 affects FFmpeg n6.1.1 with an integer overflow in the CAF decoder. The CVSS gives a MEDIUM overall risk (6.2), attack vector LOCAL, requiring no user interaction, with the impact limited to availability (I=NONE, A=HIGH). The vulnerability is tied to the FFmpeg CAF demux/decoder cod...
CVE-2024-36619
CVE-2024-36619 affects FFmpeg n6.1.1 in the WAVARC decoder of libavcodec, where an integer overflow on certain block types can cause a denial-of-service. Connected sources corroborate this vulnerability as part of FFmpeg issues across multiple advisories (e.g., Ubuntu USN-7823-1 and other vendor ...
CVE-2024-35368
FFmpeg n7.0 is affected by CVE-2024-35368: a Double Free in the rkmpp_retrieve_frame function of libavcodec/rkmppdec.c. Connected advisories indicate mitigations exist: SUSE SU-2025-0862-1 and SUSE SU-2025-1128-1 note fixing CVE-2024-35368 in FFmpeg, and Debian DSA-5985-1 lists CVE-2024-35368 amo...
CVE-2024-35366
CVE-2024-35366 affects FFmpeg v6.1.1. The vulnerability is in the parse_options function of sbgdec.c in the libavformat module, where certain inputs are not properly validated. This can allow negative duration values to be accepted without bounds checking, leading to an integer overflow and poten...
CVE-2024-36618
CVE-2024-36618 affects FFmpeg n6.1.1 in the AVI demuxer of libavformat, where an integer overflow can lead to a denial-of-service. The connected advisories confirm this vulnerability and reference the FFmpeg component implicated (AVI demuxer, libavformat) and the specific version family (n6.1.1)....
PT-2024-27096
Name of the Vulnerable Software and Affected Versions FFmpeg version 6.1.1 Description The issue is related to an integer overflow in the AVI demuxer of the libavformat library, potentially resulting in a denial-of-service DoS condition. Recommendations For version 6.1.1, consider updating to a...
CVE-2024-35368
FFmpeg n7.0 is affected by a Double Free via the rkmppretrieveframe function within libavcodec/rkmppdec.c...
CVE-2024-36617
FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder...
CVE-2024-35367
FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dspaltivec.c, static const vecs8 hsubpelfiltersouter...
CVE-2024-36618
FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service DoS condition...
CVE-2024-35367
FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dspaltivec.c, static const vecs8 hsubpelfiltersouter...
CVE-2024-35369
In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in...
CVE-2024-36615
FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread...