Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/ffmpeg@7:2.6.1-1?distro=trixie
Typedeb
Namespacedebian
Nameffmpeg
Version7:2.6.1-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version7:2.6.2-1
Latest_non_vulnerable_version7:8.1-3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-e6e4-4hr7-skdu
vulnerability_id VCID-e6e4-4hr7-skdu
summary Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted .m4a file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-1207
reference_id
reference_type
scores
0
value 0.00464
scoring_system epss
scoring_elements 0.64244
published_at 2026-04-01T12:55:00Z
1
value 0.00464
scoring_system epss
scoring_elements 0.64301
published_at 2026-04-02T12:55:00Z
2
value 0.00464
scoring_system epss
scoring_elements 0.6433
published_at 2026-04-04T12:55:00Z
3
value 0.00464
scoring_system epss
scoring_elements 0.64286
published_at 2026-04-07T12:55:00Z
4
value 0.00464
scoring_system epss
scoring_elements 0.64334
published_at 2026-04-08T12:55:00Z
5
value 0.00464
scoring_system epss
scoring_elements 0.64349
published_at 2026-04-09T12:55:00Z
6
value 0.00464
scoring_system epss
scoring_elements 0.64362
published_at 2026-04-11T12:55:00Z
7
value 0.00464
scoring_system epss
scoring_elements 0.6435
published_at 2026-04-12T12:55:00Z
8
value 0.00464
scoring_system epss
scoring_elements 0.64321
published_at 2026-04-13T12:55:00Z
9
value 0.00464
scoring_system epss
scoring_elements 0.64356
published_at 2026-04-16T12:55:00Z
10
value 0.00464
scoring_system epss
scoring_elements 0.64368
published_at 2026-04-18T12:55:00Z
11
value 0.00464
scoring_system epss
scoring_elements 0.64359
published_at 2026-04-21T12:55:00Z
12
value 0.00464
scoring_system epss
scoring_elements 0.6438
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-1207
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1207
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1207
fixed_packages
0
url pkg:deb/debian/ffmpeg@7:2.6.1-1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:2.6.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.6.1-1%3Fdistro=trixie
1
url pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-mun9-fyvn-8kfs
2
vulnerability VCID-ujjc-ays1-gfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
2
vulnerability VCID-e9kf-tzg8-9bht
3
vulnerability VCID-grh1-jxmf-dqdv
4
vulnerability VCID-mun9-fyvn-8kfs
5
vulnerability VCID-ns98-tu4j-sfd5
6
vulnerability VCID-uakc-kpg5-2ug5
7
vulnerability VCID-wrb6-w8ps-uuge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
purl pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie
aliases CVE-2015-1207
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e6e4-4hr7-skdu
1
url VCID-hehw-7bnw-buff
vulnerability_id VCID-hehw-7bnw-buff
summary
Multiple vulnerabilities have been found in libav, the worst of
    which may allow execution of arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3417
reference_id
reference_type
scores
0
value 0.01017
scoring_system epss
scoring_elements 0.77115
published_at 2026-04-01T12:55:00Z
1
value 0.01017
scoring_system epss
scoring_elements 0.77121
published_at 2026-04-02T12:55:00Z
2
value 0.01017
scoring_system epss
scoring_elements 0.77151
published_at 2026-04-04T12:55:00Z
3
value 0.01017
scoring_system epss
scoring_elements 0.77132
published_at 2026-04-07T12:55:00Z
4
value 0.01017
scoring_system epss
scoring_elements 0.77165
published_at 2026-04-08T12:55:00Z
5
value 0.01017
scoring_system epss
scoring_elements 0.77174
published_at 2026-04-09T12:55:00Z
6
value 0.01017
scoring_system epss
scoring_elements 0.77201
published_at 2026-04-11T12:55:00Z
7
value 0.01017
scoring_system epss
scoring_elements 0.7718
published_at 2026-04-12T12:55:00Z
8
value 0.01017
scoring_system epss
scoring_elements 0.77176
published_at 2026-04-13T12:55:00Z
9
value 0.01017
scoring_system epss
scoring_elements 0.77217
published_at 2026-04-16T12:55:00Z
10
value 0.01017
scoring_system epss
scoring_elements 0.77218
published_at 2026-04-18T12:55:00Z
11
value 0.01017
scoring_system epss
scoring_elements 0.77209
published_at 2026-04-21T12:55:00Z
12
value 0.01017
scoring_system epss
scoring_elements 0.77244
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3417
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3395
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3395
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3417
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3417
3
reference_url https://security.gentoo.org/glsa/201705-08
reference_id GLSA-201705-08
reference_type
scores
url https://security.gentoo.org/glsa/201705-08
fixed_packages
0
url pkg:deb/debian/ffmpeg@7:2.6.1-1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:2.6.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.6.1-1%3Fdistro=trixie
1
url pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-mun9-fyvn-8kfs
2
vulnerability VCID-ujjc-ays1-gfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
2
vulnerability VCID-e9kf-tzg8-9bht
3
vulnerability VCID-grh1-jxmf-dqdv
4
vulnerability VCID-mun9-fyvn-8kfs
5
vulnerability VCID-ns98-tu4j-sfd5
6
vulnerability VCID-uakc-kpg5-2ug5
7
vulnerability VCID-wrb6-w8ps-uuge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
purl pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie
aliases CVE-2015-3417
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hehw-7bnw-buff
2
url VCID-tyw3-z3f8-83ek
vulnerability_id VCID-tyw3-z3f8-83ek
summary libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsv_read_chunk function in libavformat/nsvdec.c.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9051
reference_id
reference_type
scores
0
value 0.00334
scoring_system epss
scoring_elements 0.56068
published_at 2026-04-01T12:55:00Z
1
value 0.00334
scoring_system epss
scoring_elements 0.56177
published_at 2026-04-02T12:55:00Z
2
value 0.00334
scoring_system epss
scoring_elements 0.56198
published_at 2026-04-04T12:55:00Z
3
value 0.00334
scoring_system epss
scoring_elements 0.56178
published_at 2026-04-07T12:55:00Z
4
value 0.00334
scoring_system epss
scoring_elements 0.56229
published_at 2026-04-08T12:55:00Z
5
value 0.00334
scoring_system epss
scoring_elements 0.56234
published_at 2026-04-09T12:55:00Z
6
value 0.00334
scoring_system epss
scoring_elements 0.56245
published_at 2026-04-11T12:55:00Z
7
value 0.00334
scoring_system epss
scoring_elements 0.56221
published_at 2026-04-12T12:55:00Z
8
value 0.00334
scoring_system epss
scoring_elements 0.56204
published_at 2026-04-13T12:55:00Z
9
value 0.00334
scoring_system epss
scoring_elements 0.56237
published_at 2026-04-16T12:55:00Z
10
value 0.00334
scoring_system epss
scoring_elements 0.56238
published_at 2026-04-18T12:55:00Z
11
value 0.00334
scoring_system epss
scoring_elements 0.56207
published_at 2026-04-21T12:55:00Z
12
value 0.00334
scoring_system epss
scoring_elements 0.56131
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9051
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9051
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9051
fixed_packages
0
url pkg:deb/debian/ffmpeg@7:2.6.1-1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:2.6.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.6.1-1%3Fdistro=trixie
1
url pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-mun9-fyvn-8kfs
2
vulnerability VCID-ujjc-ays1-gfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
2
vulnerability VCID-e9kf-tzg8-9bht
3
vulnerability VCID-grh1-jxmf-dqdv
4
vulnerability VCID-mun9-fyvn-8kfs
5
vulnerability VCID-ns98-tu4j-sfd5
6
vulnerability VCID-uakc-kpg5-2ug5
7
vulnerability VCID-wrb6-w8ps-uuge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
purl pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie
aliases CVE-2017-9051
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tyw3-z3f8-83ek
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.6.1-1%3Fdistro=trixie