CVE-2024-35365

FFmpeg 6.1.1 contains a double-free vulnerability in fftools/ffmpeg_mux_init.c (new_stream_audio), tracked as CVE-2024-35365. The issue is cited across multiple advisories (TencentOS/Ten able and SUSE/openSUSE) with fixes delivered by FFmpeg update to 6.1.2 or newer. Impact is high (CVSSv3.1: AV:...

CVE-2024-36613

FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service DoS condition or other undefined behavior...

CVE-2024-35365

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpegmuxinit.c component of FFmpeg, specifically within the newstreamaudio function...

CVE-2024-35365

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpegmuxinit.c component of FFmpeg, specifically within the newstreamaudio function...

PT-2025-1310

Name of the Vulnerable Software and Affected Versions FFmpeg version n6.1.1 Description The issue is related to an integer overflow in the DXA demuxer of the libavformat library, potentially resulting in a denial-of-service DoS condition or other undefined behavior. Recommendations For FFmpeg...

CVE-2024-36613

FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service DoS condition or other undefined behavior...

CVE-2024-35365

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpegmuxinit.c component of FFmpeg, specifically within the newstreamaudio function...

PT-2025-6968

Name of the Vulnerable Software and Affected Versions: FFmpeg git-master, N-113007-g8d24a28d06 Description: A segmentation violation was discovered in the component /libavcodec/jpeg2000dec.c. Recommendations: At the moment, there is no information about a newer version that contains a fix for thi...

PT-2025-45644

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 7:7.1.2-0+deb13u1 Description The FFmpeg multimedia framework contains flaws that may lead to a denial of service or the potential execution of arbitrary code when processing improperly formed files or streams...

PT-2025-31051

Name of the Vulnerable Software and Affected Versions ffmpeg affected versions not specified Description A null pointer dereference issue exists in the FFmpeg ALS decoder, specifically within the libavcodec/alsdec.c file. This can lead to crashes or unexpected behavior when processing audio...

PT-2025-36736

Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: A heap-buffer-overflow write exists in the jpeg2000dec component of FFmpeg. This issue could allow a remote attacker to potentially execute code or cause a denial of service through the...

PT-2025-38735

Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description A flaw exists in the config input function within the FFmpeg multimedia library due to pointer dereferencing. Successful exploitation by a remote attacker may lead to a denial-of-service...

CVE-2023-6603

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...

DEBIAN-CVE-2023-6603

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...

DEBIAN-CVE-2023-6602

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists...

CVE-2023-6602

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists...

UBUNTU-CVE-2023-6603

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...

UBUNTU-CVE-2023-6602

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists...

CVE-2023-6603 Ffmpeg: null pointer dereference in ffmpeg hls parsing

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...

CVE-2023-6603 Ffmpeg: null pointer dereference in ffmpeg hls parsing

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...