OESA-2024-1936 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg 7.0 is vulnerabl...

OPENSUSE-SU-2024:14231-1 ffmpeg-4-4.4.4-12.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.4-12.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14226-1 ffmpeg-6-6.1.1-6.1 on GA media

These are all security issues fixed in the ffmpeg-6-6.1.1-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14222-1 ffmpeg-7-7.0-3.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14221-1 ffmpeg-5-5.1.4-9.1 on GA media

These are all security issues fixed in the ffmpeg-5-5.1.4-9.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 40 Update: ffmpeg-6.1.1-19.fc40

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

Fedora 40 : ffmpeg (2024-810afc5c2e)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-810afc5c2e advisory. Backport fix for CVE-2023-49528 and backport fixes for compatibility with Mesa 24.0.6+ / 24.1.4+ for VA- API Tenable has extracted the preceding description...

OESA-2024-1876 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: An integer overflow...

OESA-2024-1875 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: An integer overflow...

OESA-2024-1873 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: An integer overflow...

OESA-2024-1833 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: Integer overflow...

OESA-2024-1804 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: adtsdecodeextradata in...

OESA-2024-1806 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: adtsdecodeextradata in...

Ffmpeg load_input_picture buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version 7.0, which stems from a boundary error in loadinputpicture in libavcodec/mpegvideoenc.c:1216:21 when handling untrusted input. A...

Ffmpeg copy_column buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version 7.0, which stems from a boundary error in the copycolumn parameter of libavfilter/vftiltandshift.c:189:5 when handling untrusted...

The vulnerability of the component `spexrmpict_request_frame` (libavfilter/avf_showspectrum.c) in the FFmpeg multimedia library allows a attacker to execute arbitrary code.

The vulnerability of the spectrumpicrequestframe component in the FFmpeg multimedia library libavfilter/avfshowspectrum.c is related to buffer overflow in the “cue” section. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the config_eq_output component (libavfilter/asrc_afirsrc.c) in the FFmpeg multimedia library allows a attacker to execute arbitrary code.

The vulnerability of the configeqoutput component libavfilter/asrcafirsrc.c in the FFmpeg multimedia library is related to buffer overflow in the “queue” mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Ffmpeg hevc_frame_end Buffer Overflow Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version 7.0, which stems from a boundary error in hevcframeend in libavcodec/hevcdec.c:2947:22 when handling untrusted input. A remote...

The vulnerability of the libavcodec/cbs_h266_syntax_template.c file in the multimedia library FFmpeg allows a hacker to execute arbitrary code.

The vulnerability in the libavcodec/cbsh266syntaxtemplate.c file of the multimedia library FFmpeg is related to unvalidated array indexing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the av_samples_set_silence component (libavutil/samplefmt.c) in the FFmpeg multimedia library allows a attacker to disclose protected information.

The vulnerability of the avsamplessetsilence component libavutil/samplefmt.c in the FFmpeg multimedia library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...