Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/ffmpeg@7:4.3.8-0%2Bdeb11u1?distro=trixie
Typedeb
Namespacedebian
Nameffmpeg
Version7:4.3.8-0+deb11u1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version7:4.3.8-0+deb11u2
Latest_non_vulnerable_version7:8.1-3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-fqzc-ggz9-gbd5
vulnerability_id VCID-fqzc-ggz9-gbd5
summary A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-7055
reference_id
reference_type
scores
0
value 0.00122
scoring_system epss
scoring_elements 0.31462
published_at 2026-04-02T12:55:00Z
1
value 0.00122
scoring_system epss
scoring_elements 0.30941
published_at 2026-04-29T12:55:00Z
2
value 0.00122
scoring_system epss
scoring_elements 0.3102
published_at 2026-04-26T12:55:00Z
3
value 0.00122
scoring_system epss
scoring_elements 0.31141
published_at 2026-04-24T12:55:00Z
4
value 0.00122
scoring_system epss
scoring_elements 0.31312
published_at 2026-04-21T12:55:00Z
5
value 0.00122
scoring_system epss
scoring_elements 0.31341
published_at 2026-04-18T12:55:00Z
6
value 0.00122
scoring_system epss
scoring_elements 0.31361
published_at 2026-04-16T12:55:00Z
7
value 0.00122
scoring_system epss
scoring_elements 0.31328
published_at 2026-04-13T12:55:00Z
8
value 0.00122
scoring_system epss
scoring_elements 0.31367
published_at 2026-04-12T12:55:00Z
9
value 0.00122
scoring_system epss
scoring_elements 0.3141
published_at 2026-04-11T12:55:00Z
10
value 0.00122
scoring_system epss
scoring_elements 0.31407
published_at 2026-04-09T12:55:00Z
11
value 0.00122
scoring_system epss
scoring_elements 0.31376
published_at 2026-04-08T12:55:00Z
12
value 0.00122
scoring_system epss
scoring_elements 0.31322
published_at 2026-04-07T12:55:00Z
13
value 0.00122
scoring_system epss
scoring_elements 0.31504
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-7055
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7055
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7055
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://vuldb.com/?ctiid.273651
reference_id ?ctiid.273651
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-08T15:41:29Z/
url https://vuldb.com/?ctiid.273651
4
reference_url https://ffmpeg.org/download.html
reference_id download.html
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-08T15:41:29Z/
url https://ffmpeg.org/download.html
5
reference_url https://ffmpeg.org/
reference_id ffmpeg.org
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-08T15:41:29Z/
url https://ffmpeg.org/
6
reference_url https://vuldb.com/?id.273651
reference_id ?id.273651
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-08T15:41:29Z/
url https://vuldb.com/?id.273651
7
reference_url https://github.com/CookedMelon/ReportCVE/tree/main/FFmpeg/poc3
reference_id poc3
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-08T15:41:29Z/
url https://github.com/CookedMelon/ReportCVE/tree/main/FFmpeg/poc3
8
reference_url https://vuldb.com/?submit.376532
reference_id ?submit.376532
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-08T15:41:29Z/
url https://vuldb.com/?submit.376532
9
reference_url https://usn.ubuntu.com/7823-1/
reference_id USN-7823-1
reference_type
scores
url https://usn.ubuntu.com/7823-1/
fixed_packages
0
url pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-mun9-fyvn-8kfs
2
vulnerability VCID-ujjc-ays1-gfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie
1
url pkg:deb/debian/ffmpeg@7:4.3.8-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:4.3.8-0%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.8-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/ffmpeg@7:5.1.6-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:5.1.6-0%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.6-0%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
2
vulnerability VCID-e9kf-tzg8-9bht
3
vulnerability VCID-grh1-jxmf-dqdv
4
vulnerability VCID-mun9-fyvn-8kfs
5
vulnerability VCID-ns98-tu4j-sfd5
6
vulnerability VCID-uakc-kpg5-2ug5
7
vulnerability VCID-wrb6-w8ps-uuge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/ffmpeg@7:7.0.2-1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:7.0.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.0.2-1%3Fdistro=trixie
5
url pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie
6
url pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
purl pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie
aliases CVE-2024-7055
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fqzc-ggz9-gbd5
1
url VCID-ns98-tu4j-sfd5
vulnerability_id VCID-ns98-tu4j-sfd5
summary FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-31578
reference_id
reference_type
scores
0
value 0.00278
scoring_system epss
scoring_elements 0.51226
published_at 2026-04-21T12:55:00Z
1
value 0.00323
scoring_system epss
scoring_elements 0.55417
published_at 2026-04-18T12:55:00Z
2
value 0.00323
scoring_system epss
scoring_elements 0.55413
published_at 2026-04-16T12:55:00Z
3
value 0.00323
scoring_system epss
scoring_elements 0.55378
published_at 2026-04-13T12:55:00Z
4
value 0.00323
scoring_system epss
scoring_elements 0.55396
published_at 2026-04-12T12:55:00Z
5
value 0.00323
scoring_system epss
scoring_elements 0.55418
published_at 2026-04-11T12:55:00Z
6
value 0.00323
scoring_system epss
scoring_elements 0.55407
published_at 2026-04-09T12:55:00Z
7
value 0.00323
scoring_system epss
scoring_elements 0.55357
published_at 2026-04-07T12:55:00Z
8
value 0.00323
scoring_system epss
scoring_elements 0.55354
published_at 2026-04-02T12:55:00Z
9
value 0.00323
scoring_system epss
scoring_elements 0.55379
published_at 2026-04-04T12:55:00Z
10
value 0.00332
scoring_system epss
scoring_elements 0.56044
published_at 2026-04-29T12:55:00Z
11
value 0.00332
scoring_system epss
scoring_elements 0.56048
published_at 2026-04-24T12:55:00Z
12
value 0.00332
scoring_system epss
scoring_elements 0.56069
published_at 2026-04-26T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-31578
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31578
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31578
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/ffmpeg/ffmpeg/commit/3bb00c0a420c3ce83c6fafee30270d69622ccad7
reference_id 3bb00c0a420c3ce83c6fafee30270d69622ccad7
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-05-10T18:55:14Z/
url https://github.com/ffmpeg/ffmpeg/commit/3bb00c0a420c3ce83c6fafee30270d69622ccad7
4
reference_url https://gist.github.com/1047524396/45400cce5859d78dcd3a62010df8d179
reference_id 45400cce5859d78dcd3a62010df8d179
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-05-10T18:55:14Z/
url https://gist.github.com/1047524396/45400cce5859d78dcd3a62010df8d179
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
reference_id 6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-05-10T18:55:14Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
reference_id IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-05-10T18:55:14Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
reference_id LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-05-10T18:55:14Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
8
reference_url https://usn.ubuntu.com/6803-1/
reference_id USN-6803-1
reference_type
scores
url https://usn.ubuntu.com/6803-1/
fixed_packages
0
url pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-mun9-fyvn-8kfs
2
vulnerability VCID-ujjc-ays1-gfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie
1
url pkg:deb/debian/ffmpeg@7:4.3.8-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:4.3.8-0%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.8-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/ffmpeg@7:7.0.1-3?distro=trixie
purl pkg:deb/debian/ffmpeg@7:7.0.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.0.1-3%3Fdistro=trixie
3
url pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
purl pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie
aliases CVE-2024-31578
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ns98-tu4j-sfd5
2
url VCID-qr7y-vmc2-8qce
vulnerability_id VCID-qr7y-vmc2-8qce
summary Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in the libavfilter/bwdifdsp.c:125:5 component.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-49502
reference_id
reference_type
scores
0
value 0.00246
scoring_system epss
scoring_elements 0.47845
published_at 2026-04-29T12:55:00Z
1
value 0.00246
scoring_system epss
scoring_elements 0.47873
published_at 2026-04-02T12:55:00Z
2
value 0.00246
scoring_system epss
scoring_elements 0.47842
published_at 2026-04-07T12:55:00Z
3
value 0.00246
scoring_system epss
scoring_elements 0.47895
published_at 2026-04-08T12:55:00Z
4
value 0.00246
scoring_system epss
scoring_elements 0.4789
published_at 2026-04-09T12:55:00Z
5
value 0.00246
scoring_system epss
scoring_elements 0.47914
published_at 2026-04-11T12:55:00Z
6
value 0.00246
scoring_system epss
scoring_elements 0.47892
published_at 2026-04-12T12:55:00Z
7
value 0.00246
scoring_system epss
scoring_elements 0.47901
published_at 2026-04-13T12:55:00Z
8
value 0.00246
scoring_system epss
scoring_elements 0.47955
published_at 2026-04-16T12:55:00Z
9
value 0.00246
scoring_system epss
scoring_elements 0.4795
published_at 2026-04-18T12:55:00Z
10
value 0.00246
scoring_system epss
scoring_elements 0.47904
published_at 2026-04-21T12:55:00Z
11
value 0.00246
scoring_system epss
scoring_elements 0.47887
published_at 2026-04-24T12:55:00Z
12
value 0.00246
scoring_system epss
scoring_elements 0.47898
published_at 2026-04-26T12:55:00Z
13
value 0.00246
scoring_system epss
scoring_elements 0.47894
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-49502
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49502
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49502
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://trac.ffmpeg.org/ticket/10688
reference_id 10688
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-01T16:52:33Z/
url https://trac.ffmpeg.org/ticket/10688
4
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
reference_id 6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-01T16:52:33Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
5
reference_url https://github.com/FFmpeg/FFmpeg
reference_id FFmpeg
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-01T16:52:33Z/
url https://github.com/FFmpeg/FFmpeg
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
reference_id IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-01T16:52:33Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
reference_id LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-01T16:52:33Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
8
reference_url https://usn.ubuntu.com/6803-1/
reference_id USN-6803-1
reference_type
scores
url https://usn.ubuntu.com/6803-1/
fixed_packages
0
url pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-mun9-fyvn-8kfs
2
vulnerability VCID-ujjc-ays1-gfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie
1
url pkg:deb/debian/ffmpeg@7:4.3.8-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:4.3.8-0%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.8-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/ffmpeg@7:5.1.7-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:5.1.7-0%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.7-0%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
2
vulnerability VCID-e9kf-tzg8-9bht
3
vulnerability VCID-grh1-jxmf-dqdv
4
vulnerability VCID-mun9-fyvn-8kfs
5
vulnerability VCID-ns98-tu4j-sfd5
6
vulnerability VCID-uakc-kpg5-2ug5
7
vulnerability VCID-wrb6-w8ps-uuge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/ffmpeg@7:7.0.1-3?distro=trixie
purl pkg:deb/debian/ffmpeg@7:7.0.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.0.1-3%3Fdistro=trixie
5
url pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie
6
url pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
purl pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie
aliases CVE-2023-49502
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qr7y-vmc2-8qce
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.8-0%252Bdeb11u1%3Fdistro=trixie