Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/ffmpeg4@4.1.1-r0?arch=armhf&distroversion=v3.17&reponame=community
Typeapk
Namespacealpine
Nameffmpeg4
Version4.1.1-r0
Qualifiers
arch armhf
distroversion v3.17
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4.1.3-r0
Latest_non_vulnerable_version4.4.1-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-nzna-uxam-jbgb
vulnerability_id VCID-nzna-uxam-jbgb
summary FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbs_av1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in after commit b97a4b658814b2de8b9f2a3bce491c002d34de31.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-1000016
reference_id
reference_type
scores
0
value 0.00433
scoring_system epss
scoring_elements 0.62816
published_at 2026-04-29T12:55:00Z
1
value 0.00433
scoring_system epss
scoring_elements 0.62817
published_at 2026-04-26T12:55:00Z
2
value 0.00433
scoring_system epss
scoring_elements 0.62645
published_at 2026-04-01T12:55:00Z
3
value 0.00433
scoring_system epss
scoring_elements 0.62703
published_at 2026-04-02T12:55:00Z
4
value 0.00433
scoring_system epss
scoring_elements 0.62735
published_at 2026-04-04T12:55:00Z
5
value 0.00433
scoring_system epss
scoring_elements 0.62699
published_at 2026-04-07T12:55:00Z
6
value 0.00433
scoring_system epss
scoring_elements 0.62751
published_at 2026-04-08T12:55:00Z
7
value 0.00433
scoring_system epss
scoring_elements 0.62767
published_at 2026-04-09T12:55:00Z
8
value 0.00433
scoring_system epss
scoring_elements 0.62785
published_at 2026-04-11T12:55:00Z
9
value 0.00433
scoring_system epss
scoring_elements 0.62775
published_at 2026-04-12T12:55:00Z
10
value 0.00433
scoring_system epss
scoring_elements 0.62752
published_at 2026-04-13T12:55:00Z
11
value 0.00433
scoring_system epss
scoring_elements 0.62792
published_at 2026-04-16T12:55:00Z
12
value 0.00433
scoring_system epss
scoring_elements 0.628
published_at 2026-04-18T12:55:00Z
13
value 0.00433
scoring_system epss
scoring_elements 0.62781
published_at 2026-04-21T12:55:00Z
14
value 0.00433
scoring_system epss
scoring_elements 0.62801
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-1000016
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1000016
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1000016
2
reference_url https://github.com/FFmpeg/FFmpeg/commit/b97a4b658814b2de8b9f2a3bce491c002d34de31#diff-cd7e24986650014d67f484f3ffceef3f
reference_id
reference_type
scores
url https://github.com/FFmpeg/FFmpeg/commit/b97a4b658814b2de8b9f2a3bce491c002d34de31#diff-cd7e24986650014d67f484f3ffceef3f
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922066
reference_id 922066
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922066
4
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:4.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:ffmpeg:ffmpeg:4.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:ffmpeg:ffmpeg:4.1:*:*:*:*:*:*:*
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-1000016
reference_id CVE-2019-1000016
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2019-1000016
fixed_packages
0
url pkg:apk/alpine/ffmpeg4@4.1.1-r0?arch=armhf&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/ffmpeg4@4.1.1-r0?arch=armhf&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/ffmpeg4@4.1.1-r0%3Farch=armhf&distroversion=v3.17&reponame=community
aliases CVE-2019-1000016
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nzna-uxam-jbgb
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/ffmpeg4@4.1.1-r0%3Farch=armhf&distroversion=v3.17&reponame=community