Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/ffmpeg@7:7.1-3?distro=trixie
purl pkg:deb/debian/ffmpeg@7:7.1-3?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-3etm-sqyu-67fm FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service (DoS) condition. CVE-2024-36619
VCID-e9kf-tzg8-9bht FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread. CVE-2024-36615
VCID-m827-r499-xubz FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. CVE-2024-35368

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:38:29.319854+00:00 Debian Importer Fixing VCID-3etm-sqyu-67fm https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:23:39.788491+00:00 Debian Importer Fixing VCID-m827-r499-xubz https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:55:58.113640+00:00 Debian Importer Fixing VCID-3etm-sqyu-67fm https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:16:18.285739+00:00 Debian Importer Fixing VCID-m827-r499-xubz https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:22:25.487348+00:00 Debian Importer Fixing VCID-e9kf-tzg8-9bht https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:12:16.615608+00:00 Debian Importer Fixing VCID-3etm-sqyu-67fm https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:04:48.412764+00:00 Debian Importer Fixing VCID-m827-r499-xubz https://security-tracker.debian.org/tracker/data/json 38.1.0