Search for packages
| purl | pkg:deb/debian/ffmpeg@7:4.1.9-0%2Bdeb10u1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-126a-h1j8-37be
Aliases: CVE-2020-22019 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-132s-5ca1-ekge
Aliases: CVE-2020-22031 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-1ene-uw7y-hyh7
Aliases: CVE-2020-22039 |
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function. |
Affected by 22 other vulnerabilities. |
|
VCID-1kt8-snqa-5ygv
Aliases: CVE-2023-6602 |
A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists. |
Affected by 8 other vulnerabilities. |
|
VCID-1naj-ejg3-vucx
Aliases: CVE-2020-20445 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-1vbq-3ve8-dbdr
Aliases: CVE-2025-7700 |
FFmpeg: NULL Pointer Dereference in FFmpeg ALS Decoder (libavcodec/alsdec.c) |
Affected by 8 other vulnerabilities. |
|
VCID-2843-dc35-wqb1
Aliases: CVE-2020-13904 |
Multiple vulnerabilities have been found in FFmpeg, the worst of which could result in the arbitrary execution of code. |
Affected by 22 other vulnerabilities. |
|
VCID-2h78-8pyd-bkd7
Aliases: CVE-2021-38093 |
Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
Affected by 22 other vulnerabilities. |
|
VCID-2r5v-2n11-u3c3
Aliases: CVE-2020-22021 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-2y4c-3nny-3ybc
Aliases: CVE-2020-22049 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-352p-mxyy-k3bu
Aliases: CVE-2025-22921 |
FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c. |
Affected by 8 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-3kuu-9ct2-ufff
Aliases: CVE-2020-21688 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-3rut-euq4-nye9
Aliases: CVE-2021-38090 |
Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
Affected by 22 other vulnerabilities. |
|
VCID-3uu6-gewn-puhh
Aliases: CVE-2021-38171 |
Multiple vulnerabilitiies have been discovered in FFmpeg, the worst of which could lead to code execution |
Affected by 22 other vulnerabilities. |
|
VCID-4dbn-zqcg-sqed
Aliases: CVE-2020-22036 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-4mv3-944q-43av
Aliases: CVE-2020-22034 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-4p7u-gbbg-8qec
Aliases: CVE-2020-20892 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-55tz-e6th-bqhd
Aliases: CVE-2020-14212 |
Multiple vulnerabilities have been found in FFmpeg, the worst of which could result in the arbitrary execution of code. |
Affected by 22 other vulnerabilities. |
|
VCID-5d1q-u8kw-gyce
Aliases: CVE-2024-32230 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-5tcy-5qh1-tfds
Aliases: CVE-2020-20453 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-5uzy-vv1e-pffa
Aliases: CVE-2020-22033 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-5w7b-tky9-5kdw
Aliases: CVE-2023-51798 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-5zpv-11eu-67em
Aliases: CVE-2020-22017 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-69c5-czpf-ubbt
Aliases: CVE-2020-20448 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-6v9u-fg54-vkdq
Aliases: CVE-2022-1475 |
Multiple vulnerabilitiies have been discovered in FFmpeg, the worst of which could lead to code execution |
Affected by 22 other vulnerabilities. |
|
VCID-74cw-4jws-53en
Aliases: CVE-2024-36616 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-7661-8gpd-7yab
Aliases: CVE-2020-22048 |
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c. |
Affected by 22 other vulnerabilities. |
|
VCID-7kmr-r2hd-dfap
Aliases: CVE-2023-6603 |
A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization. |
Affected by 8 other vulnerabilities. |
|
VCID-7skv-51zg-8qfh
Aliases: CVE-2023-51793 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-83hg-szmj-d3f2
Aliases: CVE-2020-21697 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-8yan-7qec-57ac
Aliases: CVE-2020-35965 |
Multiple vulnerabilities have been found in FFmpeg, the worst of which could result in the arbitrary execution of code. |
Affected by 22 other vulnerabilities. |
|
VCID-a1vj-7z31-fff2
Aliases: CVE-2019-17542 |
Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. |
Affected by 22 other vulnerabilities. |
|
VCID-a4se-yrg5-dqgc
Aliases: CVE-2020-22024 |
Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of Service. |
Affected by 22 other vulnerabilities. |
|
VCID-aj2n-gz1w-gbaw
Aliases: CVE-2020-22044 |
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c. |
Affected by 22 other vulnerabilities. |
|
VCID-azt6-p94b-4ke8
Aliases: CVE-2021-38114 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-b1zp-uw35-hyen
Aliases: CVE-2020-22041 |
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc. |
Affected by 22 other vulnerabilities. |
|
VCID-bjzd-xs1q-tkas
Aliases: CVE-2021-3566 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-cjef-ggd6-tugx
Aliases: CVE-2020-22027 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-cpnk-whs1-6kg7
Aliases: CVE-2025-1594 |
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. |
Affected by 8 other vulnerabilities. |
|
VCID-cwdm-78q3-r7ch
Aliases: CVE-2020-35964 |
Multiple vulnerabilities have been found in FFmpeg, the worst of which could result in the arbitrary execution of code. |
Affected by 22 other vulnerabilities. |
|
VCID-dbxj-ayf9-cuad
Aliases: CVE-2024-36617 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-deye-6fud-bkf1
Aliases: CVE-2020-22026 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-dkhw-evaq-xuc8
Aliases: CVE-2020-22042 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-e9kf-tzg8-9bht
Aliases: CVE-2024-36615 |
FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread. |
Affected by 8 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-ehxu-n6zn-h7be
Aliases: CVE-2020-22051 |
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c. |
Affected by 22 other vulnerabilities. |
|
VCID-eyf7-r7m9-jfhm
Aliases: CVE-2019-13390 |
Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. |
Affected by 22 other vulnerabilities. |
|
VCID-f7vs-mmvn-huf9
Aliases: CVE-2023-50010 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-fqzc-ggz9-gbd5
Aliases: CVE-2024-7055 |
A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651. |
Affected by 8 other vulnerabilities. |
|
VCID-g1ag-ugcm-zudw
Aliases: CVE-2020-22016 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-g2v8-4pvp-kbhy
Aliases: CVE-2021-38091 |
Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
Affected by 22 other vulnerabilities. |
|
VCID-g4te-h48e-fyeu
Aliases: CVE-2020-22054 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-gwet-989h-3fhz
Aliases: CVE-2024-36618 |
FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. |
Affected by 8 other vulnerabilities. |
|
VCID-h9pf-cucf-tqe6
Aliases: CVE-2019-17539 |
Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. |
Affected by 22 other vulnerabilities. |
|
VCID-hd6u-9x7x-mke8
Aliases: CVE-2023-6605 |
A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs. |
Affected by 8 other vulnerabilities. |
|
VCID-hert-vku8-1ydd
Aliases: CVE-2023-51794 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-hp2q-hjkw-m7dq
Aliases: CVE-2022-3109 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-hs6k-vw8x-7kcb
Aliases: CVE-2020-22056 |
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c. |
Affected by 22 other vulnerabilities. |
|
VCID-hy8h-fhaj-jbew
Aliases: CVE-2022-48434 |
Multiple vulnerabilitiies have been discovered in FFmpeg, the worst of which could lead to code execution |
Affected by 22 other vulnerabilities. |
|
VCID-j1u7-chw5-7ybd
Aliases: CVE-2020-22040 |
A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c. |
Affected by 22 other vulnerabilities. |
|
VCID-j716-3n1b-huhv
Aliases: CVE-2020-22028 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-ju23-jjm4-1yd6
Aliases: CVE-2020-22030 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-jx57-jbtz-efe7
Aliases: CVE-2020-23906 |
FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity. |
Affected by 22 other vulnerabilities. |
|
VCID-k14h-eek4-s3cv
Aliases: CVE-2025-22919 |
A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (DoS) via opening a crafted AAC file. |
Affected by 8 other vulnerabilities. |
|
VCID-kcjw-jy65-hfge
Aliases: CVE-2023-6604 |
A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation. |
Affected by 8 other vulnerabilities. |
|
VCID-m3u1-zn19-k3dy
Aliases: CVE-2024-35367 |
FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer |
Affected by 8 other vulnerabilities. |
|
VCID-m827-r499-xubz
Aliases: CVE-2024-35368 |
FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. |
Affected by 8 other vulnerabilities. |
|
VCID-n9qa-r9nt-fyc8
Aliases: CVE-2025-9951 |
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000. |
Affected by 8 other vulnerabilities. |
|
VCID-npwb-djcp-67aw
Aliases: CVE-2020-22025 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-ns98-tu4j-sfd5
Aliases: CVE-2024-31578 |
FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function. |
Affected by 8 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-p9ep-x7mj-dbg8
Aliases: CVE-2020-20898 |
Integer Overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
Affected by 22 other vulnerabilities. |
|
VCID-pa11-k8vb-zuc2
Aliases: CVE-2020-22037 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-pqw1-1ty8-mucj
Aliases: CVE-2022-3341 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-q7zf-nut2-tfan
Aliases: CVE-2021-38094 |
Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
Affected by 22 other vulnerabilities. |
|
VCID-qgbj-eex5-27c3
Aliases: CVE-2020-22020 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-qr7y-vmc2-8qce
Aliases: CVE-2023-49502 |
Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in the libavfilter/bwdifdsp.c:125:5 component. |
Affected by 8 other vulnerabilities. |
|
VCID-r8ym-8wau-dyej
Aliases: CVE-2020-22032 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-rfby-3dun-rqf9
Aliases: CVE-2025-63757 |
ffmpeg: FFmpeg: Integer overflow vulnerability leads to Denial of Service |
Affected by 8 other vulnerabilities. |
|
VCID-s1dr-ve2r-rbbu
Aliases: DSA-5268-1 ffmpeg |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-s5r5-ux5c-xbft
Aliases: CVE-2020-20891 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-s85w-tanp-77hb
Aliases: CVE-2020-20451 |
Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c. |
Affected by 22 other vulnerabilities. |
|
VCID-s8cb-95ne-bkgg
Aliases: CVE-2020-22035 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-sfw9-8qxf-wfd3
Aliases: CVE-2021-28429 |
Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service (DoS) via crafted .mov file. |
Affected by 22 other vulnerabilities. |
|
VCID-spq1-m6bg-y3f4
Aliases: CVE-2020-22023 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-tadx-3e5r-s3eh
Aliases: CVE-2024-36613 |
ffmpeg: FFmpeg: Integer overflow in DXA demuxer leads to denial of service |
Affected by 22 other vulnerabilities. |
|
VCID-tjjt-y2km-5ka6
Aliases: CVE-2020-22046 |
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c. |
Affected by 22 other vulnerabilities. |
|
VCID-tpwr-paas-nyhk
Aliases: CVE-2020-21041 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-tv52-u3ru-7uc1
Aliases: CVE-2021-38092 |
Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
Affected by 22 other vulnerabilities. |
|
VCID-tw9p-14dv-qfd1
Aliases: CVE-2020-20450 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-u45n-rr9s-ffah
Aliases: CVE-2025-0518 |
Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C . This issue affects FFmpeg: 7.1. Issue was fixed:Â https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman |
Affected by 8 other vulnerabilities. |
|
VCID-ukcq-2rd1-2fdc
Aliases: CVE-2020-22029 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-v4b7-ptzf-47bt
Aliases: CVE-2020-20896 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-w85w-xyf2-kucn
Aliases: CVE-2020-22022 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-wn9q-ycnn-7kg5
Aliases: CVE-2020-20446 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-wrb6-w8ps-uuge
Aliases: CVE-2025-10256 |
ffmpeg: NULL pointer dereference in Firequalizer filter (libavfilter/af_firequalizer.c) |
Affected by 8 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-xr1x-p5ve-j7au
Aliases: CVE-2020-22043 |
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c. |
Affected by 22 other vulnerabilities. |
|
VCID-yava-v7c8-tkd8
Aliases: CVE-2020-20902 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-yjhh-upyt-qkht
Aliases: CVE-2024-35366 |
security update |
Affected by 22 other vulnerabilities. |
|
VCID-ykuh-4kyy-yyft
Aliases: CVE-2021-38291 |
Multiple vulnerabilitiies have been discovered in FFmpeg, the worst of which could lead to code execution |
Affected by 22 other vulnerabilities. |
|
VCID-yyre-ybbu-8be4
Aliases: CVE-2020-12284 |
Multiple vulnerabilities have been found in FFmpeg, the worst of which could result in the arbitrary execution of code. |
Affected by 22 other vulnerabilities. |
|
VCID-zcky-jf6f-zbas
Aliases: CVE-2020-22015 |
security update |
Affected by 22 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-126a-h1j8-37be | security update |
CVE-2020-22019
|
| VCID-132s-5ca1-ekge | security update |
CVE-2020-22031
|
| VCID-1naj-ejg3-vucx | security update |
CVE-2020-20445
|
| VCID-1ppb-hsn1-rfb4 | security update |
CVE-2017-14171
|
| VCID-2843-dc35-wqb1 | Multiple vulnerabilities have been found in FFmpeg, the worst of which could result in the arbitrary execution of code. |
CVE-2020-13904
|
| VCID-2f5v-efwu-zkf2 | security update |
CVE-2017-14054
|
| VCID-2r5v-2n11-u3c3 | security update |
CVE-2020-22021
|
| VCID-2xa8-jpbu-nfgw | security update |
CVE-2019-11338
|
| VCID-2y4c-3nny-3ybc | security update |
CVE-2020-22049
|
| VCID-2y9j-sdhe-t3fv | FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS. This attack appear to be exploitable via specially crafted MXF file which has to be provided as input. This vulnerability appears to have been fixed in bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 and later. |
CVE-2018-1999014
|
| VCID-2zp5-1mhj-xba8 | Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. |
CVE-2018-10001
|
| VCID-2zqc-psx1-r7gt | security update |
CVE-2017-14059
|
| VCID-3frq-jdkb-gbe3 | Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. |
CVE-2018-7751
|
| VCID-3h4v-tpz1-nkc8 | The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via crafted MPEG-4 video data. |
CVE-2019-11339
|
| VCID-3kuu-9ct2-ufff | security update |
CVE-2020-21688
|
| VCID-3uu6-gewn-puhh | Multiple vulnerabilitiies have been discovered in FFmpeg, the worst of which could lead to code execution |
CVE-2021-38171
|
| VCID-3vdw-3jtz-yqcu | security update |
CVE-2017-9608
|
| VCID-44fr-brhn-3ba5 | FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASF_F format demuxer that can result in heap memory reading. This attack appear to be exploitable via specially crafted ASF file that has to provided as input. This vulnerability appears to have been fixed in 5aba5b89d0b1d73164d3b81764828bb8b20ff32a and later. |
CVE-2018-1999015
|
| VCID-4dbn-zqcg-sqed | security update |
CVE-2020-22036
|
| VCID-4mv3-944q-43av | security update |
CVE-2020-22034
|
| VCID-4p7u-gbbg-8qec | security update |
CVE-2020-20892
|
| VCID-4rx9-wv92-mbds | security update |
CVE-2017-15672
|
| VCID-53q2-pjmd-yudm | security update |
CVE-2017-11719
|
| VCID-54sp-9tsa-jkfv | security update |
CVE-2017-14225
|
| VCID-5tcy-5qh1-tfds | security update |
CVE-2020-20453
|
| VCID-5uzy-vv1e-pffa | security update |
CVE-2020-22033
|
| VCID-5zpv-11eu-67em | security update |
CVE-2020-22017
|
| VCID-64rv-4d7p-f7ae | In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to error_resilience.c, h263dec.c, and mpeg4videodec.c. |
CVE-2018-13304
|
| VCID-69c5-czpf-ubbt | security update |
CVE-2020-20448
|
| VCID-6cw6-yt4s-fygb | security update |
CVE-2017-14170
|
| VCID-77c1-h4ns-zkdg | In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service. |
CVE-2018-13301
|
| VCID-7jm3-3pr8-r3dm | security update |
CVE-2017-17081
|
| VCID-83hg-szmj-d3f2 | security update |
CVE-2020-21697
|
| VCID-8pzz-vgxw-xqcv | security update |
CVE-2018-13302
|
| VCID-8sef-te24-d3gw | security update |
CVE-2018-15822
|
| VCID-8yan-7qec-57ac | Multiple vulnerabilities have been found in FFmpeg, the worst of which could result in the arbitrary execution of code. |
CVE-2020-35965
|
| VCID-9vgp-smu2-nfdb | An inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service. |
CVE-2018-12459
|
| VCID-9w52-r33d-aygp | Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. |
CVE-2018-9841
|
| VCID-a1vj-7z31-fff2 | Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. |
CVE-2019-17542
|
| VCID-aa2u-md78-pkdg | security update |
CVE-2017-14056
|
| VCID-azt6-p94b-4ke8 | security update |
CVE-2021-38114
|
| VCID-bjzd-xs1q-tkas | security update |
CVE-2021-3566
|
| VCID-bu85-sac7-z7ba | security update |
CVE-2018-13300
|
| VCID-c499-qvu1-x3h6 | security update |
CVE-2018-6621
|
| VCID-cjef-ggd6-tugx | security update |
CVE-2020-22027
|
| VCID-cqnh-jcnf-cuh1 | security update |
CVE-2018-14394
|
| VCID-d9xn-zb4d-7ubd | security update |
CVE-2017-14058
|
| VCID-deye-6fud-bkf1 | security update |
CVE-2020-22026
|
| VCID-dkhw-evaq-xuc8 | security update |
CVE-2020-22042
|
| VCID-dx4t-wzh9-tbfn | security update |
CVE-2017-14169
|
| VCID-dy2j-at4k-7qdn | security update |
CVE-2018-1999013
|
| VCID-egw2-6put-7bce | security update |
CVE-2017-11399
|
| VCID-eyf7-r7m9-jfhm | Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. |
CVE-2019-13390
|
| VCID-fw43-1pdc-kugv | security update |
CVE-2017-11665
|
| VCID-fzc3-fc7s-9kdj | security update |
CVE-2018-6392
|
| VCID-g1ag-ugcm-zudw | security update |
CVE-2020-22016
|
| VCID-g1y7-hq4d-6ya7 | security update |
CVE-2017-14767
|
| VCID-g4te-h48e-fyeu | security update |
CVE-2020-22054
|
| VCID-gztp-4964-3fe2 | Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. |
CVE-2018-7557
|
| VCID-h9pf-cucf-tqe6 | Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. |
CVE-2019-17539
|
| VCID-hng1-rpw3-sqby | security update |
CVE-2018-1999011
|
| VCID-j5ns-nbc5-9qgs | security update |
CVE-2017-14222
|
| VCID-j716-3n1b-huhv | security update |
CVE-2020-22028
|
| VCID-ju23-jjm4-1yd6 | security update |
CVE-2020-22030
|
| VCID-kkgc-yhse-d3ga | security update |
CVE-2017-15186
|
| VCID-mynq-m5p7-uqex | security update |
CVE-2017-14055
|
| VCID-npwb-djcp-67aw | security update |
CVE-2020-22025
|
| VCID-nzna-uxam-jbgb | FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbs_av1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in after commit b97a4b658814b2de8b9f2a3bce491c002d34de31. |
CVE-2019-1000016
|
| VCID-p7c5-vwxs-j3cs | security update |
CVE-2017-14223
|
| VCID-pa11-k8vb-zuc2 | security update |
CVE-2020-22037
|
| VCID-qgbj-eex5-27c3 | security update |
CVE-2020-22020
|
| VCID-qwnc-76hk-33fa | security update |
CVE-2018-1999012
|
| VCID-r8ym-8wau-dyej | security update |
CVE-2020-22032
|
| VCID-s5r5-ux5c-xbft | security update |
CVE-2020-20891
|
| VCID-s8cb-95ne-bkgg | security update |
CVE-2020-22035
|
| VCID-scwk-yz1c-f3hg | In FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the avpriv_ac3_parse_header function in libavcodec/ac3_parser.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service. |
CVE-2018-13303
|
| VCID-spq1-m6bg-y3f4 | security update |
CVE-2020-22023
|
| VCID-tdnn-qfmc-wufa | security update |
CVE-2018-12458
|
| VCID-tpwr-paas-nyhk | security update |
CVE-2020-21041
|
| VCID-tw9p-14dv-qfd1 | security update |
CVE-2020-20450
|
| VCID-ua27-1zcs-xffy | Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. |
CVE-2019-12730
|
| VCID-ukcq-2rd1-2fdc | security update |
CVE-2020-22029
|
| VCID-v4b7-ptzf-47bt | security update |
CVE-2020-20896
|
| VCID-vrnc-cyyg-3yfb | security update |
CVE-2018-14395
|
| VCID-w85w-xyf2-kucn | security update |
CVE-2020-22022
|
| VCID-wn9q-ycnn-7kg5 | security update |
CVE-2020-20446
|
| VCID-xnz9-udka-nufz | security update |
CVE-2018-1999010
|
| VCID-yava-v7c8-tkd8 | security update |
CVE-2020-20902
|
| VCID-ykuh-4kyy-yyft | Multiple vulnerabilitiies have been discovered in FFmpeg, the worst of which could lead to code execution |
CVE-2021-38291
|
| VCID-ymxh-d75c-xyec | Multiple vulnerabilities have been found in FFmpeg, the worst of which allows remote attackers to execute arbitrary code. |
CVE-2018-6912
|
| VCID-ywtw-jynv-nyce | security update |
CVE-2017-14057
|
| VCID-yyre-ybbu-8be4 | Multiple vulnerabilities have been found in FFmpeg, the worst of which could result in the arbitrary execution of code. |
CVE-2020-12284
|
| VCID-yzhm-254s-5ygd | security update |
CVE-2019-9718
|
| VCID-zcky-jf6f-zbas | security update |
CVE-2020-22015
|
| VCID-zm5h-d795-nqgp | security update |
CVE-2017-16840
|
| VCID-zy4a-ax4q-5qb9 | ffmpeg: complex format argument in handle_open_brace in libavcodec/htmlsubtitles.c causing denial of service |
CVE-2019-9721
|