SUSE-SU-2025:02990-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2025-7700: Fixed NULL Pointer Dereference in FFmpeg ALS Decoder libavcodec/alsdec.c bsc1246790...

Linux Distros Unpatched Vulnerability : CVE-2025-1594

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ffaacsearchfortns of the file libavcodec/aacenctns.c...

Linux Distros Unpatched Vulnerability : CVE-2023-51791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavcodec/jpegxlparser.c in genaliasmap...

Linux Distros Unpatched Vulnerability : CVE-2023-6602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS...

SUSE: Security Advisory (SUSE-SU-2025:02972-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2023-51793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavutil/imgutils.c:353:9 in...

Linux Distros Unpatched Vulnerability : CVE-2018-13304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertio...

Linux Distros Unpatched Vulnerability : CVE-2023-6605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via...

Linux Distros Unpatched Vulnerability : CVE-2025-25469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c. CVE-2025-25469 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2024-36617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. CVE-2024-36617 Note that Nessus relies on the presence of the package as reported...

Linux Distros Unpatched Vulnerability : CVE-2020-23906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

Linux Distros Unpatched Vulnerability : CVE-2024-55069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamfreadheader in /libavformat/iamfdec.c. CVE-2024-55069 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2020-20891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in function configinput in libavfilter/vfgblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecifi...

Linux Distros Unpatched Vulnerability : CVE-2017-15672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readheader function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP...

Linux Distros Unpatched Vulnerability : CVE-2023-6601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded...

Linux Distros Unpatched Vulnerability : CVE-2020-22030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/afafade.c in crossfadesamplesfltp, which might lead to memory corruption and othe...

Linux Distros Unpatched Vulnerability : CVE-2018-1999015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASFF format demuxer that can result in heap memory...

Linux Distros Unpatched Vulnerability : CVE-2020-22028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability exists in FFmpeg 4.2 in filtervertically8 at libavfilter/vfavgblur.c, which could cause a remote Denial of Service. CVE-2020-22028...

Linux Distros Unpatched Vulnerability : CVE-2025-25473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformatfreecontext function in libavutil/mem.c. CVE-2025-25473 Note that...

Linux Distros Unpatched Vulnerability : CVE-2018-13300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In FFmpeg 3.2 and 4.0.1, an improper argument AVCodecParameters passed to the avprivrequestsample function in the handleeac3 function in libavformat/movenc.c ma...