CVE-2024-36615

FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread...

CVE-2024-35368

FFmpeg n7.0 is affected by a Double Free via the rkmppretrieveframe function within libavcodec/rkmppdec.c...

CVE-2024-35367

FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dspaltivec.c, static const vecs8 hsubpelfiltersouter...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version n6.1.1, which stems from the presence of an out-of-bounds read...

PT-2024-27096

Name of the Vulnerable Software and Affected Versions FFmpeg version 6.1.1 Description The issue is related to an integer overflow in the AVI demuxer of the libavformat library, potentially resulting in a denial-of-service DoS condition. Recommendations For version 6.1.1, consider updating to a...

CVE-2024-36615

FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread...

CVE-2024-36617

FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder...

CVE-2024-36616

An integer overflow in the component /libavformat/westwoodvqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file...

CVE-2024-35366

CVE-2024-35366 affects FFmpeg v6.1.1. The vulnerability is in the parse_options function of sbgdec.c in the libavformat module, where certain inputs are not properly validated. This can allow negative duration values to be accepted without bounds checking, leading to an integer overflow and poten...

CVE-2024-36616

An integer overflow in the component /libavformat/westwoodvqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file...

CVE-2024-36617

CVE-2024-36617 affects FFmpeg n6.1.1 with an integer overflow in the CAF decoder. The CVSS gives a MEDIUM overall risk (6.2), attack vector LOCAL, requiring no user interaction, with the impact limited to availability (I=NONE, A=HIGH). The vulnerability is tied to the FFmpeg CAF demux/decoder cod...

CVE-2024-35367

FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dspaltivec.c, static const vecs8 hsubpelfiltersouter...

CVE-2024-36619

FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service DoS condition...

CVE-2024-36618

CVE-2024-36618 affects FFmpeg n6.1.1 in the AVI demuxer of libavformat, where an integer overflow can lead to a denial-of-service. The connected advisories confirm this vulnerability and reference the FFmpeg component implicated (AVI demuxer, libavformat) and the specific version family (n6.1.1)....

CVE-2024-36619

CVE-2024-36619 affects FFmpeg n6.1.1 in the WAVARC decoder of libavcodec, where an integer overflow on certain block types can cause a denial-of-service. Connected sources corroborate this vulnerability as part of FFmpeg issues across multiple advisories (e.g., Ubuntu USN-7823-1 and other vendor ...

PT-2024-27095 · FFmpeg +1 · Ffmpeg +1

Name of the Vulnerable Software and Affected Versions: FFmpeg version n7.0 Description: The issue is related to a race condition in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while bein...

CVE-2024-36615

FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread...

CVE-2024-36617

FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder...

CVE-2024-35368

FFmpeg n7.0 is affected by a Double Free via the rkmppretrieveframe function within libavcodec/rkmppdec.c...

CVE-2024-35368

FFmpeg n7.0 is affected by CVE-2024-35368: a Double Free in the rkmpp_retrieve_frame function of libavcodec/rkmppdec.c. Connected advisories indicate mitigations exist: SUSE SU-2025-0862-1 and SUSE SU-2025-1128-1 note fixing CVE-2024-35368 in FFmpeg, and Debian DSA-5985-1 lists CVE-2024-35368 amo...