Lookup for vulnerable packages by Package URL.

GET /api/packages/583519?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/583519?format=api",
    "purl": "pkg:deb/debian/ffmpeg@7:2.7.2-1?distro=trixie",
    "type": "deb",
    "namespace": "debian",
    "name": "ffmpeg",
    "version": "7:2.7.2-1",
    "qualifiers": {
        "distro": "trixie"
    },
    "subpath": "",
    "is_vulnerable": false,
    "next_non_vulnerable_version": "7:2.8.1-1",
    "latest_non_vulnerable_version": "7:8.1-3",
    "affected_by_vulnerabilities": [],
    "fixing_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92751?format=api",
            "vulnerability_id": "VCID-42bs-g677-syav",
            "summary": "The ff_mpv_common_init function in libavcodec/mpegvideo.c in FFmpeg before 2.7.2 does not properly maintain the encoding context, which allows remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via crafted MPEG data.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6821",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72239",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72245",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72265",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72241",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7228",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72292",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72314",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72297",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72284",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72327",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72336",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72324",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6821"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6821",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6821"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/583519?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:2.7.2-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.7.2-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582177?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ujjc-ays1-gfc2"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582178?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        },
                        {
                            "vulnerability": "VCID-e9kf-tzg8-9bht"
                        },
                        {
                            "vulnerability": "VCID-grh1-jxmf-dqdv"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ns98-tu4j-sfd5"
                        },
                        {
                            "vulnerability": "VCID-uakc-kpg5-2ug5"
                        },
                        {
                            "vulnerability": "VCID-wrb6-w8ps-uuge"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582179?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582180?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2015-6821"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-42bs-g677-syav"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92755?format=api",
            "vulnerability_id": "VCID-aud3-7f5k-2ffs",
            "summary": "The ff_frame_thread_init function in libavcodec/pthread_frame.c in FFmpeg before 2.7.2 mishandles certain memory-allocation failures, which allows remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via a crafted file, as demonstrated by an AVI file.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6825",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72239",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72245",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72265",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72241",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7228",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72292",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72314",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72297",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72284",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72327",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72336",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72324",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6825"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6825",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6825"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/583519?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:2.7.2-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.7.2-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582177?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ujjc-ays1-gfc2"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582178?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        },
                        {
                            "vulnerability": "VCID-e9kf-tzg8-9bht"
                        },
                        {
                            "vulnerability": "VCID-grh1-jxmf-dqdv"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ns98-tu4j-sfd5"
                        },
                        {
                            "vulnerability": "VCID-uakc-kpg5-2ug5"
                        },
                        {
                            "vulnerability": "VCID-wrb6-w8ps-uuge"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582179?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582180?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2015-6825"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-aud3-7f5k-2ffs"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92752?format=api",
            "vulnerability_id": "VCID-mep9-2hjj-2ucj",
            "summary": "The destroy_buffers function in libavcodec/sanm.c in FFmpeg before 2.7.2 does not properly maintain height and width values in the video context, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via crafted LucasArts Smush video data.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6822",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00887",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75422",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00887",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75425",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00887",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75457",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00887",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75437",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00887",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7548",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00887",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75489",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00887",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75509",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00887",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75487",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00887",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75477",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00887",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75519",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00887",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75524",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00887",
                            "scoring_system": "epss",
                            "scoring_elements": "0.75513",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6822"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6822",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6822"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/583519?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:2.7.2-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.7.2-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582177?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ujjc-ays1-gfc2"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582178?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        },
                        {
                            "vulnerability": "VCID-e9kf-tzg8-9bht"
                        },
                        {
                            "vulnerability": "VCID-grh1-jxmf-dqdv"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ns98-tu4j-sfd5"
                        },
                        {
                            "vulnerability": "VCID-uakc-kpg5-2ug5"
                        },
                        {
                            "vulnerability": "VCID-wrb6-w8ps-uuge"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582179?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582180?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2015-6822"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mep9-2hjj-2ucj"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92749?format=api",
            "vulnerability_id": "VCID-qu7n-8fzd-n7dq",
            "summary": "Multiple integer underflows in the ff_mjpeg_decode_frame function in libavcodec/mjpegdec.c in FFmpeg before 2.7.2 allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted MJPEG data.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6819",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00519",
                            "scoring_system": "epss",
                            "scoring_elements": "0.66711",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00519",
                            "scoring_system": "epss",
                            "scoring_elements": "0.66751",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00519",
                            "scoring_system": "epss",
                            "scoring_elements": "0.66776",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00519",
                            "scoring_system": "epss",
                            "scoring_elements": "0.66748",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00519",
                            "scoring_system": "epss",
                            "scoring_elements": "0.66797",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00519",
                            "scoring_system": "epss",
                            "scoring_elements": "0.66812",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00519",
                            "scoring_system": "epss",
                            "scoring_elements": "0.66833",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00519",
                            "scoring_system": "epss",
                            "scoring_elements": "0.66819",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00519",
                            "scoring_system": "epss",
                            "scoring_elements": "0.66787",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00519",
                            "scoring_system": "epss",
                            "scoring_elements": "0.66821",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00519",
                            "scoring_system": "epss",
                            "scoring_elements": "0.66834",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00519",
                            "scoring_system": "epss",
                            "scoring_elements": "0.66818",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6819"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6819",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6819"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/583519?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:2.7.2-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.7.2-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582177?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ujjc-ays1-gfc2"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582178?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        },
                        {
                            "vulnerability": "VCID-e9kf-tzg8-9bht"
                        },
                        {
                            "vulnerability": "VCID-grh1-jxmf-dqdv"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ns98-tu4j-sfd5"
                        },
                        {
                            "vulnerability": "VCID-uakc-kpg5-2ug5"
                        },
                        {
                            "vulnerability": "VCID-wrb6-w8ps-uuge"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582179?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582180?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2015-6819"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qu7n-8fzd-n7dq"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92748?format=api",
            "vulnerability_id": "VCID-t7b1-zmhg-47ff",
            "summary": "The decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce uniqueness of the IHDR (aka image header) chunk in a PNG image, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted image with two or more of these chunks.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6818",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77292",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77298",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77327",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77308",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77338",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77347",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77375",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77354",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77351",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7739",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77382",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6818"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6818",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6818"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/2944-1/",
                    "reference_id": "USN-2944-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/2944-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/583519?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:2.7.2-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.7.2-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582177?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ujjc-ays1-gfc2"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582178?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        },
                        {
                            "vulnerability": "VCID-e9kf-tzg8-9bht"
                        },
                        {
                            "vulnerability": "VCID-grh1-jxmf-dqdv"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ns98-tu4j-sfd5"
                        },
                        {
                            "vulnerability": "VCID-uakc-kpg5-2ug5"
                        },
                        {
                            "vulnerability": "VCID-wrb6-w8ps-uuge"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582179?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582180?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2015-6818"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t7b1-zmhg-47ff"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92754?format=api",
            "vulnerability_id": "VCID-xhd6-cw8u-ubd7",
            "summary": "The sws_init_context function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize certain pixbuf data structures, which allows remote attackers to cause a denial of service (segmentation violation) or possibly have unspecified other impact via crafted video data.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6824",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77292",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77298",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77327",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77308",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77338",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77347",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77375",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77354",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77351",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7739",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77382",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6824"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6824",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6824"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/2944-1/",
                    "reference_id": "USN-2944-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/2944-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/583519?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:2.7.2-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.7.2-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582177?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ujjc-ays1-gfc2"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582178?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        },
                        {
                            "vulnerability": "VCID-e9kf-tzg8-9bht"
                        },
                        {
                            "vulnerability": "VCID-grh1-jxmf-dqdv"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ns98-tu4j-sfd5"
                        },
                        {
                            "vulnerability": "VCID-uakc-kpg5-2ug5"
                        },
                        {
                            "vulnerability": "VCID-wrb6-w8ps-uuge"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582179?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582180?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2015-6824"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xhd6-cw8u-ubd7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92750?format=api",
            "vulnerability_id": "VCID-xnhs-ez8z-nka2",
            "summary": "The ff_sbr_apply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a matching AAC frame syntax element before proceeding with Spectral Band Replication calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted AAC data.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6820",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77292",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77298",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77327",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77308",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77338",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77347",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77375",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77354",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77351",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7739",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77382",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6820"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6820",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6820"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/2944-1/",
                    "reference_id": "USN-2944-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/2944-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/583519?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:2.7.2-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.7.2-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582177?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ujjc-ays1-gfc2"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582178?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        },
                        {
                            "vulnerability": "VCID-e9kf-tzg8-9bht"
                        },
                        {
                            "vulnerability": "VCID-grh1-jxmf-dqdv"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ns98-tu4j-sfd5"
                        },
                        {
                            "vulnerability": "VCID-uakc-kpg5-2ug5"
                        },
                        {
                            "vulnerability": "VCID-wrb6-w8ps-uuge"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582179?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582180?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2015-6820"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xnhs-ez8z-nka2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92756?format=api",
            "vulnerability_id": "VCID-xq5b-uuhn-bqd4",
            "summary": "The ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via crafted (1) RV30 or (2) RV40 RealVideo data.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6826",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77292",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77298",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77327",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77308",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77338",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77347",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77375",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77354",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77351",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7739",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.01033",
                            "scoring_system": "epss",
                            "scoring_elements": "0.77382",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6826"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6826",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6826"
                },
                {
                    "reference_url": "https://usn.ubuntu.com/2944-1/",
                    "reference_id": "USN-2944-1",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://usn.ubuntu.com/2944-1/"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/583519?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:2.7.2-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.7.2-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582177?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ujjc-ays1-gfc2"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582178?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        },
                        {
                            "vulnerability": "VCID-e9kf-tzg8-9bht"
                        },
                        {
                            "vulnerability": "VCID-grh1-jxmf-dqdv"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ns98-tu4j-sfd5"
                        },
                        {
                            "vulnerability": "VCID-uakc-kpg5-2ug5"
                        },
                        {
                            "vulnerability": "VCID-wrb6-w8ps-uuge"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582179?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582180?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2015-6826"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xq5b-uuhn-bqd4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/92753?format=api",
            "vulnerability_id": "VCID-yzqd-t4b6-7yhc",
            "summary": "The allocate_buffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize certain context data, which allows remote attackers to cause a denial of service (segmentation violation) or possibly have unspecified other impact via crafted Apple Lossless Audio Codec (ALAC) data.",
            "references": [
                {
                    "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6823",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72239",
                            "published_at": "2026-04-01T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72245",
                            "published_at": "2026-04-02T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72265",
                            "published_at": "2026-04-04T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72241",
                            "published_at": "2026-04-07T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.7228",
                            "published_at": "2026-04-08T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72292",
                            "published_at": "2026-04-09T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72314",
                            "published_at": "2026-04-11T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72297",
                            "published_at": "2026-04-12T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72284",
                            "published_at": "2026-04-13T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72327",
                            "published_at": "2026-04-16T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72336",
                            "published_at": "2026-04-18T12:55:00Z"
                        },
                        {
                            "value": "0.00712",
                            "scoring_system": "epss",
                            "scoring_elements": "0.72324",
                            "published_at": "2026-04-21T12:55:00Z"
                        }
                    ],
                    "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-6823"
                },
                {
                    "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6823",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [],
                    "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6823"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/583519?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:2.7.2-1?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.7.2-1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582177?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ujjc-ays1-gfc2"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582178?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        },
                        {
                            "vulnerability": "VCID-e9kf-tzg8-9bht"
                        },
                        {
                            "vulnerability": "VCID-grh1-jxmf-dqdv"
                        },
                        {
                            "vulnerability": "VCID-mun9-fyvn-8kfs"
                        },
                        {
                            "vulnerability": "VCID-ns98-tu4j-sfd5"
                        },
                        {
                            "vulnerability": "VCID-uakc-kpg5-2ug5"
                        },
                        {
                            "vulnerability": "VCID-wrb6-w8ps-uuge"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582179?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-2qje-t52h-fyfk"
                        },
                        {
                            "vulnerability": "VCID-352p-mxyy-k3bu"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"
                },
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/582180?format=api",
                    "purl": "pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie",
                    "is_vulnerable": false,
                    "affected_by_vulnerabilities": [],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"
                }
            ],
            "aliases": [
                "CVE-2015-6823"
            ],
            "risk_score": null,
            "exploitability": "0.5",
            "weighted_severity": "0.0",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yzqd-t4b6-7yhc"
        }
    ],
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:2.7.2-1%3Fdistro=trixie"
}