CVE-2025-0518

Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/afpan.C . This issue affects FFmpeg: 7.1. Issue was fixed: ...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 7.1, which stems from the presence of an unchecked return value and out-of-bounds read issue that allows reading of sensitive constants in...

PT-2025-3933 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 7.1 Description: The issue is an Unchecked Return Value, Out-of-bounds Read vulnerability that allows reading sensitive constants within an executable. This vulnerability is associated with program files, specifically the af...

PT-2025-7095

Name of the Vulnerable Software and Affected Versions: FFmpeg git master before commit c08d30 Description: A NULL pointer dereference was discovered in the libavformat/mov.c component. Recommendations: For FFMpeg git master before commit c08d30, update to a version that includes the fix for this...

PT-2025-7657

Name of the Vulnerable Software and Affected Versions FFmpeg versions up to 7.1 Description A critical vulnerability was found in FFmpeg, affecting the function ff aac search for tns of the file libavcodec/aacenc tns.c of the component AAC Encoder. The manipulation leads to a stack-based buffer...

PT-2025-7093 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: FFmpeg git master before commit fd1772 Description: A NULL pointer dereference was discovered in the component libavformat/mov.c. This issue affects the FFmpeg git master before commit fd1772. Recommendations: For FFmpeg git master before...

PT-2025-7091

Name of the Vulnerable Software and Affected Versions: FFmpeg versions prior to commit d5873b Description: A memory leak was discovered in the libavutil/mem.c component. Recommendations: For versions prior to commit d5873b, update to a version that includes the fix for the memory leak in the...

PT-2025-7092

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit d5873b Description The vulnerability is a memory leak in the libavutil/iamf.c component. Exploitation may allow a remote attacker to disclose protected information. The vulnerability can be exploited to crash...

Ffmpeg Information Disclosure Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. An information disclosure vulnerability exists in FFmpeg, which stems from incorrect parsing of non-TTY-compliant input files in HLS playlists, and can be exploited by an attacker to cause ...

Unspecified Vulnerability in Ffmpeg (CNVD-2025-01669)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg. An attacker can exploit this vulnerability to commit a denial of service by triggering a null pointer dereference during initialization of a...

Ubuntu: Security Advisory (USN-7188-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7188-1: FFmpeg vulnerability

It was discovered that FFmpeg incorrectly handled certain input, which could lead to an integer overflow. An attacker could possibly use this issue to cause a denial of service by crashing the application...

USN-7188-1 ffmpeg vulnerability

It was discovered that FFmpeg incorrectly handled certain input, which could lead to an integer overflow. An attacker could possibly use this issue to cause a denial of service by crashing the application...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : FFmpeg vulnerability (USN-7188-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7188-1 advisory. It was discovered that FFmpeg incorrectly handled certain input, which could lead to an integer overflow. An attacker could...

SUSE CVE-2024-35365

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpegmuxinit.c component of FFmpeg, specifically within the newstreamaudio function...

SUSE CVE-2024-36613

FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service DoS condition or other undefined behavior...

FFmpeg integer overflow vulnerability (CNVD-2025-01707)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. An integer overflow vulnerability exists in FFmpeg n6.1.1, which can be exploited by a remote attacker to submit a special file and trick the user into parsing it, which can crash the...

CVE-2023-6604

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

DEBIAN-CVE-2023-6605

A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs...

CVE-2023-6605

A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs...