Unity Linux 20.1070e Security Update: ffmpeg (UTSA-2025-936078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936078 advisory. A CWE-125: Out-of-bounds read vulnerability exists in longtermfilter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936105)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936105 advisory. A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vfneighbor.c, which might lead to memory corruption and other potential...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936085)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936085 advisory. A heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service DOS via a crafted avi file. Tenab...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936113)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936113 advisory. Buffer Overflow vulnerability in FFmpeg 4.2 at filteredges function in libavfilter/vfyadif.c, which could let a remote malicious user cause a Denial of Service...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936100)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936100 advisory. A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodecalloccontext3 at options.c. Tenable has extracted the preceding description blo...

Unity Linux 20.1070e Security Update: ffmpeg (UTSA-2025-936079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936079 advisory. Integer Overflow vulnerability in function filter16prewitt in libavfilter/vfconvolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other...

Unity Linux 20.1070e Security Update: ffmpeg (UTSA-2025-936084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936084 advisory. FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity. Tenable...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936112)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936112 advisory. Buffer Overflow vulnerability exists in FFmpeg 4.2 in the configinput function at libavfilter/aftremolo.c, which could let a remote malicious user cause a Denial of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936082)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936082 advisory. Buffer Overflow vulnerability in function configinput in libavfilter/vfgblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936093 advisory. A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the urlopendynbufinternal function in libavformat/aviobuf.c. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936104 advisory. A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vfedgedetect.c in gaussianblur, which might lead to memory corruption and other potential...

Unity Linux 20.1070e Security Update: ffmpeg (UTSA-2025-936110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936110 advisory. A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/getbits.h when writing .mov files, which might lead to memory corruption and other potential...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936081 advisory. An issue was discovered in function filterframe in libavfilter/vflenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936099)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936099 advisory. A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ffv4l2m2mcreatecontext function in v4l2m2m.c. Tenable has extracted the preceding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936096 advisory. A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avbuffersrcaddframeflags function in buffersrc. Tenable has extracted the precedin...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936086)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936086 advisory. A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code. Tenable has extracted the preceding...

Unity Linux 20.1070e Security Update: ffmpeg (UTSA-2025-936092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936092 advisory. A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avprivfloatdspallocl function in libavutil/floatdsp.c. Tenable has extracted the...

CVE-2025-59734 Heap-buffer-overflow write in FFmpeg SANM process_ftch

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...

CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...

CVE-2025-59732 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that the height and width are divisible by 8. If the height or width of the image is not divisible by 8, the copy loops at 0 and 1 will continue to write until the next multiple of 8. The buffer...