{"url":"http://public2.vulnerablecode.io/api/packages/584763?format=json","purl":"pkg:deb/debian/ffmpeg@7:3.2.4-1?distro=trixie","type":"deb","namespace":"debian","name":"ffmpeg","version":"7:3.2.4-1","qualifiers":{"distro":"trixie"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"7:3.2.5-1","latest_non_vulnerable_version":"7:8.1.1-3","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/93327?format=json","vulnerability_id":"VCID-1xuu-f8z5-rych","summary":"FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-7866","reference_id":"","reference_type":"","scores":[{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.82105","published_at":"2026-05-09T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.82081","published_at":"2026-05-07T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.81898","published_at":"2026-04-01T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.81909","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.81932","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.81928","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.81954","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.81962","published_at":"2026-04-09T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.81982","published_at":"2026-04-11T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.81971","published_at":"2026-04-12T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.81965","published_at":"2026-04-13T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.82","published_at":"2026-04-18T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.82003","published_at":"2026-04-21T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.82025","published_at":"2026-04-24T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.82037","published_at":"2026-04-26T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.82042","published_at":"2026-04-29T12:55:00Z"},{"value":"0.01644","scoring_system":"epss","scoring_elements":"0.8206","published_at":"2026-05-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-7866"},{"reference_url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444","reference_id":"","reference_type":"","scores":[],"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7866","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7866"},{"reference_url":"https://github.com/FFmpeg/FFmpeg/commit/e371f031b942d73e02c090170975561fabd5c264","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/FFmpeg/FFmpeg/commit/e371f031b942d73e02c090170975561fabd5c264"},{"reference_url":"http://www.securityfocus.com/bid/97664","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/97664"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7866","reference_id":"CVE-2017-7866","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},{"value":"9.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7866"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/584763?format=json","purl":"pkg:deb/debian/ffmpeg@7:3.2.4-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:3.2.4-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582177?format=json","purl":"pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ujjc-ays1-gfc2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582178?format=json","purl":"pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"},{"vulnerability":"VCID-e9kf-tzg8-9bht"},{"vulnerability":"VCID-grh1-jxmf-dqdv"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ns98-tu4j-sfd5"},{"vulnerability":"VCID-uakc-kpg5-2ug5"},{"vulnerability":"VCID-wrb6-w8ps-uuge"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582179?format=json","purl":"pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582180?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1108316?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1.1-3%3Fdistro=trixie"}],"aliases":["CVE-2017-7866"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1xuu-f8z5-rych"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/58871?format=json","vulnerability_id":"VCID-9db5-5fb2-qub4","summary":"Multiple vulnerabilities have been found in Libav, the worst of\n    which may allow a Denial of Service condition.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-7862","reference_id":"","reference_type":"","scores":[{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.8221","published_at":"2026-05-09T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82187","published_at":"2026-05-07T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82009","published_at":"2026-04-01T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82021","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82043","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82038","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82065","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82072","published_at":"2026-04-09T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82091","published_at":"2026-04-11T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82082","published_at":"2026-04-12T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82074","published_at":"2026-04-13T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82108","published_at":"2026-04-16T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82109","published_at":"2026-04-18T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.8211","published_at":"2026-04-21T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82133","published_at":"2026-04-24T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82144","published_at":"2026-04-26T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82147","published_at":"2026-04-29T12:55:00Z"},{"value":"0.01662","scoring_system":"epss","scoring_elements":"0.82165","published_at":"2026-05-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-7862"},{"reference_url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=559","reference_id":"","reference_type":"","scores":[],"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=559"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8365","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8365"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7208","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7208"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7862","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7862"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9992","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9992"},{"reference_url":"https://github.com/FFmpeg/FFmpeg/commit/8c2ea3030af7b40a3c4275696fb5c76cdb80950a","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/FFmpeg/FFmpeg/commit/8c2ea3030af7b40a3c4275696fb5c76cdb80950a"},{"reference_url":"http://www.debian.org/security/2017/dsa-4012","reference_id":"","reference_type":"","scores":[],"url":"http://www.debian.org/security/2017/dsa-4012"},{"reference_url":"http://www.securityfocus.com/bid/97676","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/97676"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7862","reference_id":"CVE-2017-7862","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},{"value":"9.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7862"},{"reference_url":"https://security.gentoo.org/glsa/201811-19","reference_id":"GLSA-201811-19","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201811-19"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/584763?format=json","purl":"pkg:deb/debian/ffmpeg@7:3.2.4-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:3.2.4-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582177?format=json","purl":"pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ujjc-ays1-gfc2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582178?format=json","purl":"pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"},{"vulnerability":"VCID-e9kf-tzg8-9bht"},{"vulnerability":"VCID-grh1-jxmf-dqdv"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ns98-tu4j-sfd5"},{"vulnerability":"VCID-uakc-kpg5-2ug5"},{"vulnerability":"VCID-wrb6-w8ps-uuge"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582179?format=json","purl":"pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582180?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1108316?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1.1-3%3Fdistro=trixie"}],"aliases":["CVE-2017-7862"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9db5-5fb2-qub4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/93326?format=json","vulnerability_id":"VCID-ez11-ffk4-n3bv","summary":"FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function in libavcodec/utils.c.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-7865","reference_id":"","reference_type":"","scores":[{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83275","published_at":"2026-05-09T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83255","published_at":"2026-05-07T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83065","published_at":"2026-04-01T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83082","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83095","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83094","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83118","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83126","published_at":"2026-04-09T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83142","published_at":"2026-04-11T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83136","published_at":"2026-04-12T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83132","published_at":"2026-04-13T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83169","published_at":"2026-04-16T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.8317","published_at":"2026-04-18T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83173","published_at":"2026-04-21T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83195","published_at":"2026-04-24T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83202","published_at":"2026-04-26T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.8321","published_at":"2026-04-29T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83234","published_at":"2026-05-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-7865"},{"reference_url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452","reference_id":"","reference_type":"","scores":[],"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7865","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7865"},{"reference_url":"https://github.com/FFmpeg/FFmpeg/commit/2080bc33717955a0e4268e738acf8c1eeddbf8cb","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/FFmpeg/FFmpeg/commit/2080bc33717955a0e4268e738acf8c1eeddbf8cb"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html"},{"reference_url":"http://www.securityfocus.com/bid/97685","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/97685"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7865","reference_id":"CVE-2017-7865","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},{"value":"9.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7865"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/584763?format=json","purl":"pkg:deb/debian/ffmpeg@7:3.2.4-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:3.2.4-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582177?format=json","purl":"pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ujjc-ays1-gfc2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582178?format=json","purl":"pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"},{"vulnerability":"VCID-e9kf-tzg8-9bht"},{"vulnerability":"VCID-grh1-jxmf-dqdv"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ns98-tu4j-sfd5"},{"vulnerability":"VCID-uakc-kpg5-2ug5"},{"vulnerability":"VCID-wrb6-w8ps-uuge"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582179?format=json","purl":"pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582180?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1108316?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1.1-3%3Fdistro=trixie"}],"aliases":["CVE-2017-7865"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ez11-ffk4-n3bv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/92997?format=json","vulnerability_id":"VCID-nmaj-ujqe-fbaq","summary":"The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service (allocation of huge memory, and being killed by the OS) via a crafted MOV file.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-9561","reference_id":"","reference_type":"","scores":[{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47325","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47361","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47382","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47331","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47386","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47383","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47408","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47389","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47448","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47441","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47392","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47378","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47387","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47334","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47252","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47316","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47335","published_at":"2026-05-09T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-9561"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9561","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9561"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/584763?format=json","purl":"pkg:deb/debian/ffmpeg@7:3.2.4-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:3.2.4-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582177?format=json","purl":"pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ujjc-ays1-gfc2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582178?format=json","purl":"pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"},{"vulnerability":"VCID-e9kf-tzg8-9bht"},{"vulnerability":"VCID-grh1-jxmf-dqdv"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ns98-tu4j-sfd5"},{"vulnerability":"VCID-uakc-kpg5-2ug5"},{"vulnerability":"VCID-wrb6-w8ps-uuge"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582179?format=json","purl":"pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582180?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1108316?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1.1-3%3Fdistro=trixie"}],"aliases":["CVE-2016-9561"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nmaj-ujqe-fbaq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/93325?format=json","vulnerability_id":"VCID-peqq-9hfy-v7bj","summary":"FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-7863","reference_id":"","reference_type":"","scores":[{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83275","published_at":"2026-05-09T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83255","published_at":"2026-05-07T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83065","published_at":"2026-04-01T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83082","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83095","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83094","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83118","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83126","published_at":"2026-04-09T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83142","published_at":"2026-04-11T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83136","published_at":"2026-04-12T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83132","published_at":"2026-04-13T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83169","published_at":"2026-04-16T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.8317","published_at":"2026-04-18T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83173","published_at":"2026-04-21T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83195","published_at":"2026-04-24T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83202","published_at":"2026-04-26T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.8321","published_at":"2026-04-29T12:55:00Z"},{"value":"0.01878","scoring_system":"epss","scoring_elements":"0.83234","published_at":"2026-05-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-7863"},{"reference_url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546","reference_id":"","reference_type":"","scores":[],"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7863","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7863"},{"reference_url":"https://github.com/FFmpeg/FFmpeg/commit/e477f09d0b3619f3d29173b2cd593e17e2d1978e","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/FFmpeg/FFmpeg/commit/e477f09d0b3619f3d29173b2cd593e17e2d1978e"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html"},{"reference_url":"http://www.securityfocus.com/bid/97675","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/97675"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7863","reference_id":"CVE-2017-7863","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},{"value":"9.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7863"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/584763?format=json","purl":"pkg:deb/debian/ffmpeg@7:3.2.4-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:3.2.4-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582177?format=json","purl":"pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ujjc-ays1-gfc2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582178?format=json","purl":"pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"},{"vulnerability":"VCID-e9kf-tzg8-9bht"},{"vulnerability":"VCID-grh1-jxmf-dqdv"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ns98-tu4j-sfd5"},{"vulnerability":"VCID-uakc-kpg5-2ug5"},{"vulnerability":"VCID-wrb6-w8ps-uuge"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582179?format=json","purl":"pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582180?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1108316?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1.1-3%3Fdistro=trixie"}],"aliases":["CVE-2017-7863"],"risk_score":4.4,"exploitability":"0.5","weighted_severity":"8.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-peqq-9hfy-v7bj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/34858?format=json","vulnerability_id":"VCID-wpwh-kftw-vyhp","summary":"Multiple vulnerabilities have been found in the Chromium web\n    browser, the worst of which allows remote attackers to execute arbitrary\n    code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5024.json","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5024.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-5024","reference_id":"","reference_type":"","scores":[{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42205","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42018","published_at":"2026-05-09T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.41928","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42002","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42281","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42309","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42251","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42302","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.4231","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42332","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42296","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42268","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42318","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42294","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42222","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42156","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42152","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00202","scoring_system":"epss","scoring_elements":"0.42069","published_at":"2026-04-29T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-5024"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5006","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5006"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5007","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5007"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5008","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5008"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5009","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5009"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5010","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5010"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5011","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5011"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5012","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5012"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5013","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5013"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5014","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5014"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5015","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5015"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5016","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5016"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5017","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5017"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5018","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5018"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5019","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5019"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5020","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5020"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5021","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5021"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5022","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5022"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5023","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5023"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5024","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5024"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5025","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5025"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5026","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5026"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5027","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5027"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5028","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5028"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416675","reference_id":"1416675","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416675"},{"reference_url":"https://security.archlinux.org/ASA-201701-33","reference_id":"ASA-201701-33","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201701-33"},{"reference_url":"https://security.archlinux.org/ASA-201702-10","reference_id":"ASA-201702-10","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201702-10"},{"reference_url":"https://security.archlinux.org/AVG-156","reference_id":"AVG-156","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-156"},{"reference_url":"https://security.archlinux.org/AVG-172","reference_id":"AVG-172","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-172"},{"reference_url":"https://security.gentoo.org/glsa/201701-66","reference_id":"GLSA-201701-66","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-66"},{"reference_url":"https://security.gentoo.org/glsa/201705-05","reference_id":"GLSA-201705-05","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201705-05"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0206","reference_id":"RHSA-2017:0206","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0206"},{"reference_url":"https://usn.ubuntu.com/3180-1/","reference_id":"USN-3180-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3180-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/584763?format=json","purl":"pkg:deb/debian/ffmpeg@7:3.2.4-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:3.2.4-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582177?format=json","purl":"pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ujjc-ays1-gfc2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582178?format=json","purl":"pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"},{"vulnerability":"VCID-e9kf-tzg8-9bht"},{"vulnerability":"VCID-grh1-jxmf-dqdv"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ns98-tu4j-sfd5"},{"vulnerability":"VCID-uakc-kpg5-2ug5"},{"vulnerability":"VCID-wrb6-w8ps-uuge"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582179?format=json","purl":"pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582180?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1108316?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1.1-3%3Fdistro=trixie"}],"aliases":["CVE-2017-5024"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wpwh-kftw-vyhp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/34860?format=json","vulnerability_id":"VCID-ysu4-93vf-q7gp","summary":"Multiple vulnerabilities have been found in the Chromium web\n    browser, the worst of which allows remote attackers to execute arbitrary\n    code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5025.json","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-5025.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-5025","reference_id":"","reference_type":"","scores":[{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57641","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57775","published_at":"2026-05-09T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57713","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.5767","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57726","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57748","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57721","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57776","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57778","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57794","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57772","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57752","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57781","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57779","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57755","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57714","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00354","scoring_system":"epss","scoring_elements":"0.57734","published_at":"2026-04-26T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-5025"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5006","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5006"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5007","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5007"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5008","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5008"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5009","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5009"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5010","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5010"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5011","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5011"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5012","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5012"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5013","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5013"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5014","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5014"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5015","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5015"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5016","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5016"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5017","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5017"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5018","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5018"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5019","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5019"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5020","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5020"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5021","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5021"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5022","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5022"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5023","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5023"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5024","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5024"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5025","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5025"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5026","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5026"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5027","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5027"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5028","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5028"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416676","reference_id":"1416676","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416676"},{"reference_url":"https://security.archlinux.org/ASA-201701-33","reference_id":"ASA-201701-33","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201701-33"},{"reference_url":"https://security.archlinux.org/ASA-201702-10","reference_id":"ASA-201702-10","reference_type":"","scores":[],"url":"https://security.archlinux.org/ASA-201702-10"},{"reference_url":"https://security.archlinux.org/AVG-156","reference_id":"AVG-156","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-156"},{"reference_url":"https://security.archlinux.org/AVG-172","reference_id":"AVG-172","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-172"},{"reference_url":"https://security.gentoo.org/glsa/201701-66","reference_id":"GLSA-201701-66","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201701-66"},{"reference_url":"https://security.gentoo.org/glsa/201705-05","reference_id":"GLSA-201705-05","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201705-05"},{"reference_url":"https://access.redhat.com/errata/RHSA-2017:0206","reference_id":"RHSA-2017:0206","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2017:0206"},{"reference_url":"https://usn.ubuntu.com/3180-1/","reference_id":"USN-3180-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3180-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/584763?format=json","purl":"pkg:deb/debian/ffmpeg@7:3.2.4-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:3.2.4-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582177?format=json","purl":"pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ujjc-ays1-gfc2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:4.3.7-0%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582178?format=json","purl":"pkg:deb/debian/ffmpeg@7:5.1.8-0%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"},{"vulnerability":"VCID-e9kf-tzg8-9bht"},{"vulnerability":"VCID-grh1-jxmf-dqdv"},{"vulnerability":"VCID-mun9-fyvn-8kfs"},{"vulnerability":"VCID-ns98-tu4j-sfd5"},{"vulnerability":"VCID-uakc-kpg5-2ug5"},{"vulnerability":"VCID-wrb6-w8ps-uuge"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:5.1.8-0%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582179?format=json","purl":"pkg:deb/debian/ffmpeg@7:7.1.3-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2qje-t52h-fyfk"},{"vulnerability":"VCID-352p-mxyy-k3bu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:7.1.3-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/582180?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1108316?format=json","purl":"pkg:deb/debian/ffmpeg@7:8.1.1-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:8.1.1-3%3Fdistro=trixie"}],"aliases":["CVE-2017-5025"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ysu4-93vf-q7gp"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/ffmpeg@7:3.2.4-1%3Fdistro=trixie"}