Lucene search
K

23 matches found

OSV
OSV
added 3 days ago2 views

OPENSUSE-SU-2026:20855-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: Changes in ffmpeg-4: - Add check for the return value of avmallocarray to avoid potential NULL pointer dereference. CVE-2025-10256, bsc1249431 - Update to version 4.4.7: Codecs, filters and other various bugfixes aacenctns: clamp filter directi...

9.8CVSS6.6AI score0.00778EPSS
Exploits1References11
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в ffmpeg, ffmpeg5

It was discovered that FFmpeg git-master, N-113007-g8d24a28d06 contains a segmentation violation through the component /libavcodec/jpeg2000dec.c...

6.5CVSS6.5AI score0.00155EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.4 views

Astra Linux - уязвимость в ffmpeg, ffmpeg5

There is a heap-buffer-overflow write in jpeg2000dec FFmpeg that allows an attacker to potentially gain remote code execution or cause a denial of service through the JPEG2000’s channel definition cdef atom...

7.2CVSS7.2AI score0.00778EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-4688

Malicious code in bioql PyPI...

6.5CVSS5.8AI score0.00155EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-27255

Malicious code in bioql PyPI...

7.2CVSS6.3AI score0.00778EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/12 12:0 a.m.3 views

FFmpeg < 8.0 Heap-Buffer-Overflow

The version of FFmpeg installed on the remote host is prior to 8.0. It is, therefore, affected by a vulnerability: - A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition...

7.2CVSS7.2AI score0.00778EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/09/10 11:27 p.m.1 views

SUSE CVE-2025-9951

A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...

6.5CVSS8.2AI score0.00778EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-9951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the...

7.2CVSS7.2AI score0.00778EPSS
Exploits0References2
OSV
OSV
added 2025/09/09 2:15 p.m.1 views

CVE-2025-9951

A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...

8.2AI score
Exploits0References1
OSV
OSV
added 2025/09/09 2:15 p.m.1 views

DEBIAN-CVE-2025-9951

A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...

7.2CVSS7.1AI score0.00778EPSS
Exploits0References1
OSV
OSV
added 2025/09/09 2:15 p.m.0 views

UBUNTU-CVE-2025-9951

A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...

7.2CVSS7.2AI score0.00778EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2025/09/09 1:54 p.m.4 views

CVE-2025-9951

A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000...

7.2CVSS7.1AI score0.00778EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-22921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c. CVE-2025-22921 Note that...

6.5CVSS6.6AI score0.00155EPSS
Exploits0References3
OSV
OSV
added 2025/08/15 12:39 p.m.1 views

OESA-2025-2027 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg...

6.5CVSS7.4AI score0.00155EPSS
Exploits0References2
OSV
OSV
added 2025/02/18 10:15 p.m.6 views

CVE-2025-22921

FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c...

6.5CVSS6.5AI score
Exploits0References2
CVE
CVE
added 2025/02/18 12:0 a.m.92 views

CVE-2025-22921

CVE-2025-22921 affects FFmpeg (git master) with a segmentation fault in the JPEG2000 decoder path (/libavcodec/jpeg2000dec.c). Affected component is FFmpeg; root cause is a segmentation violation in that decoder. Exploitation details are not provided in the connected documents; Debian LTS advisor...

6.5CVSS7.5AI score0.00155EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/18 12:0 a.m.8 views

CVE-2025-22921

FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c...

6.5AI score0.00155EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.1 views

PT-2025-6968

Name of the Vulnerable Software and Affected Versions: FFmpeg git-master, N-113007-g8d24a28d06 Description: A segmentation violation was discovered in the component /libavcodec/jpeg2000dec.c. Recommendations: At the moment, there is no information about a newer version that contains a fix for thi...

9.8CVSS7AI score0.02331EPSS
Exploits15References113
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.1 views

PT-2025-36736

Name of the Vulnerable Software and Affected Versions: FFmpeg affected versions not specified Description: A heap-buffer-overflow write exists in the jpeg2000dec component of FFmpeg. This issue could allow a remote attacker to potentially execute code or cause a denial of service through the...

7.2CVSS6.7AI score0.00778EPSS
Exploits0References33
Mageia
Mageia
added 2016/02/09 7:5 p.m.33 views

Updated ffmpeg packages fix security vulnerabilities

Updated ffmpeg packages fix security vulnerabilities: FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming HLS M3U8 file, leading to an external HTTP request in which the URL string contains the first li...

6.5CVSS3.8AI score0.52104EPSS
Exploits3References5
Rows per page
Query Builder