Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/ffmpeg@7:5.1.1-1?distro=trixie
purl pkg:deb/debian/ffmpeg@7:5.1.1-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-fxqx-4tbe-n3e6 A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries in the loop and adds `sc->ctts_data[i].count` to `sc->sample_offsets_count`. This can lead to an integer overflow resulting in a small allocation with `av_calloc()`. An attacker can cause remote code execution via a malicious mp4 file. We recommend upgrading past commit c953baa084607dd1d84c3bfcce3cf6a87c3e6e05 CVE-2022-2566

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T08:57:19.915428+00:00 Debian Importer Fixing VCID-fxqx-4tbe-n3e6 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-11T18:00:33.084023+00:00 Debian Importer Fixing VCID-fxqx-4tbe-n3e6 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:03:21.747330+00:00 Debian Importer Fixing VCID-fxqx-4tbe-n3e6 https://security-tracker.debian.org/tracker/data/json 38.1.0