Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/ffmpeg@7:6.0-4?distro=trixie
Typedeb
Namespacedebian
Nameffmpeg
Version7:6.0-4
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version7:6.1-1
Latest_non_vulnerable_version7:8.1-3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-mfx3-a4bq-zkhy
vulnerability_id VCID-mfx3-a4bq-zkhy
summary security update
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-4907
reference_id
reference_type
scores
0
value 0.01448
scoring_system epss
scoring_elements 0.80709
published_at 2026-04-02T12:55:00Z
1
value 0.01448
scoring_system epss
scoring_elements 0.8073
published_at 2026-04-04T12:55:00Z
2
value 0.01448
scoring_system epss
scoring_elements 0.80726
published_at 2026-04-07T12:55:00Z
3
value 0.01448
scoring_system epss
scoring_elements 0.80754
published_at 2026-04-08T12:55:00Z
4
value 0.01448
scoring_system epss
scoring_elements 0.80762
published_at 2026-04-09T12:55:00Z
5
value 0.01448
scoring_system epss
scoring_elements 0.80779
published_at 2026-04-11T12:55:00Z
6
value 0.01448
scoring_system epss
scoring_elements 0.80763
published_at 2026-04-12T12:55:00Z
7
value 0.01448
scoring_system epss
scoring_elements 0.80755
published_at 2026-04-13T12:55:00Z
8
value 0.01448
scoring_system epss
scoring_elements 0.80792
published_at 2026-04-16T12:55:00Z
9
value 0.01448
scoring_system epss
scoring_elements 0.80793
published_at 2026-04-18T12:55:00Z
10
value 0.01448
scoring_system epss
scoring_elements 0.80794
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-4907
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4174
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4174
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4175
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4175
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4176
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4176
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4177
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4177
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4178
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4178
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4179
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4179
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4180
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4180
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4181
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4181
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4182
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4182
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4183
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4183
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4184
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4184
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4185
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4185
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4186
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4186
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4187
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4187
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4188
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4188
16
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4189
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4189
17
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4190
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4190
18
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4191
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4191
19
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4192
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4192
20
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4193
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4193
21
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4194
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4194
22
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4195
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4195
23
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4906
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4906
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4907
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4907
25
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4955
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4955
fixed_packages
0
url pkg:deb/debian/ffmpeg@0?distro=trixie
purl pkg:deb/debian/ffmpeg@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@0%3Fdistro=trixie
1
url pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-mun9-fyvn-8kfs
2
vulnerability VCID-ujjc-ays1-gfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/ffmpeg@7:5.1.4-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:5.1.4-0%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.4-0%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
2
vulnerability VCID-e9kf-tzg8-9bht
3
vulnerability VCID-grh1-jxmf-dqdv
4
vulnerability VCID-mun9-fyvn-8kfs
5
vulnerability VCID-ns98-tu4j-sfd5
6
vulnerability VCID-uakc-kpg5-2ug5
7
vulnerability VCID-wrb6-w8ps-uuge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/ffmpeg@7:6.0-4?distro=trixie
purl pkg:deb/debian/ffmpeg@7:6.0-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:6.0-4%3Fdistro=trixie
5
url pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie
6
url pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
purl pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie
aliases CVE-2022-4907
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mfx3-a4bq-zkhy
1
url VCID-wa5g-9n96-tybv
vulnerability_id VCID-wa5g-9n96-tybv
summary A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill_audiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in version 6.0 by 9903ba28c28ab18dc7b7b6fb8571cc8b5caae1a6 but a backport for 5.1 was forgotten. The exploit has been disclosed to the public and may be used. Upgrading to version 5.1.6 and 6.0 9903ba28c28ab18dc7b7b6fb8571cc8b5caae1a6 is able to address this issue. It is recommended to upgrade the affected component.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-7272
reference_id
reference_type
scores
0
value 0.00204
scoring_system epss
scoring_elements 0.42551
published_at 2026-04-02T12:55:00Z
1
value 0.00204
scoring_system epss
scoring_elements 0.42579
published_at 2026-04-04T12:55:00Z
2
value 0.00283
scoring_system epss
scoring_elements 0.51775
published_at 2026-04-18T12:55:00Z
3
value 0.00283
scoring_system epss
scoring_elements 0.51768
published_at 2026-04-16T12:55:00Z
4
value 0.00283
scoring_system epss
scoring_elements 0.51728
published_at 2026-04-13T12:55:00Z
5
value 0.00283
scoring_system epss
scoring_elements 0.51744
published_at 2026-04-12T12:55:00Z
6
value 0.00283
scoring_system epss
scoring_elements 0.51766
published_at 2026-04-11T12:55:00Z
7
value 0.00283
scoring_system epss
scoring_elements 0.51717
published_at 2026-04-09T12:55:00Z
8
value 0.00283
scoring_system epss
scoring_elements 0.51721
published_at 2026-04-08T12:55:00Z
9
value 0.00283
scoring_system epss
scoring_elements 0.51666
published_at 2026-04-07T12:55:00Z
10
value 0.00283
scoring_system epss
scoring_elements 0.51754
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-7272
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://vuldb.com/?ctiid.273945
reference_id ?ctiid.273945
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-09T15:01:45Z/
url https://vuldb.com/?ctiid.273945
3
reference_url https://ffmpeg.org/
reference_id ffmpeg.org
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-09T15:01:45Z/
url https://ffmpeg.org/
4
reference_url https://vuldb.com/?id.273945
reference_id ?id.273945
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-09T15:01:45Z/
url https://vuldb.com/?id.273945
5
reference_url https://github.com/CookedMelon/ReportCVE/tree/main/FFmpeg/poc5
reference_id poc5
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-09T15:01:45Z/
url https://github.com/CookedMelon/ReportCVE/tree/main/FFmpeg/poc5
6
reference_url https://github.com/CookedMelon/ReportCVE/tree/main/FFmpeg/poc6
reference_id poc6
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-09T15:01:45Z/
url https://github.com/CookedMelon/ReportCVE/tree/main/FFmpeg/poc6
fixed_packages
0
url pkg:deb/debian/ffmpeg@0?distro=trixie
purl pkg:deb/debian/ffmpeg@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@0%3Fdistro=trixie
1
url pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-mun9-fyvn-8kfs
2
vulnerability VCID-ujjc-ays1-gfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/ffmpeg@7:5.1.6-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:5.1.6-0%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.6-0%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
2
vulnerability VCID-e9kf-tzg8-9bht
3
vulnerability VCID-grh1-jxmf-dqdv
4
vulnerability VCID-mun9-fyvn-8kfs
5
vulnerability VCID-ns98-tu4j-sfd5
6
vulnerability VCID-uakc-kpg5-2ug5
7
vulnerability VCID-wrb6-w8ps-uuge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/ffmpeg@7:6.0-4?distro=trixie
purl pkg:deb/debian/ffmpeg@7:6.0-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:6.0-4%3Fdistro=trixie
5
url pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qje-t52h-fyfk
1
vulnerability VCID-352p-mxyy-k3bu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie
6
url pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
purl pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie
aliases CVE-2024-7272
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wa5g-9n96-tybv
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:6.0-4%3Fdistro=trixie