OESA-2026-3208 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: When decoding an OpenEX...

OESA-2026-3210 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: When decoding an OpenEX...

Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: CVE-2023-6601: Fixed HLS Unsafe File Extension Bypass bsc1220545. CVE-2025-63757: Fixed integer overflow in yuv2ya16Xctemplate bsc1255392. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE SLED15: ffmpeg-4 / ffmpeg-4-libavcodec-devel / ffmpeg-4-libavdevice-devel / etc (SUSE-SU-2026:0198-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0198-1 advisory. - CVE-2023-6601: Fixed HLS Unsafe File Extension Bypass bsc1220545. - CVE-2025-63757: Fixed...

openSUSE 16 Security Update : ffmpeg-4 (openSUSE-SU-2026:20064-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20064-1 advisory. - CVE-2025-63757: Fixed swscale/output: Fix integer overflow in yuv2ya16Xctemplate bsc1255392. Tenable has extracted the preceding description block...

Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: CVE-2023-6601: Fixed HLS Unsafe File Extension Bypass bsc1220545. CVE-2025-63757: Fixed integer overflow in yuv2ya16Xctemplate bsc1255392. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the yuv2ya16Xctemplate function within libswscale/output.c. An attacker can cause the application to crash or become unresponsive by providing specially crafted input that triggers an integer overflow...

CVE-2025-63757

An integer overflow vulnerability exists in the yuv2ya16_X_c_template function within the libswscale/output.c component of FFmpeg 8.0 . The root cause is the accumulation of filtered pixel values, which can lead to an integer overflow. This flaw could allow a remote attacker to cause a service fa...

PT-2025-52241

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 7:7.1.3-0+deb13u1 FFmpeg version 8.0 Description An integer overflow issue exists in the yuv2ya16 X c template function within the libswscale/output.c component. This could lead to a denial of service or potentially...