Search for packages
| purl | pkg:deb/debian/libav@6:11.12-1~deb8u1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2ntm-6576-aaak | FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file. |
CVE-2016-1897
|
| VCID-61uw-6nqp-aaan | Integer overflow in the asf_write_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PTS (aka presentation timestamp) value in a .mov file. |
CVE-2016-2326
|
| VCID-9qcr-482k-aaan | Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file. |
CVE-2017-9992
|
| VCID-9qxa-qwwt-aaag | FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame function in libavcodec/pictordec.c. |
CVE-2017-7862
|
| VCID-a4jg-f4bk-aaaq | Integer overflow in libavcodec/mpeg12dec.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. |
CVE-2016-9822
|
| VCID-eg6q-kekn-aaas | The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, which triggers an out-of-bounds array access. |
CVE-2015-3395
|
| VCID-faq5-mh21-aaac | The put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted MP3 file. |
CVE-2016-7424
|
| VCID-fz3u-p7uk-aaag | In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service (bitstream.c:build_table() out-of-bounds read and application crash) via a crafted Smacker stream. |
CVE-2017-16803
|
| VCID-mbzc-hcxh-aaac | The smka_decode_frame function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is consistent with the number of channels, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Smacker data. |
CVE-2015-8365
|
| VCID-ptdp-2cht-aaaf | Integer overflow in libavcodec/mpegvideo_parser.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via a crafted file. |
CVE-2016-9821
|
| VCID-py3m-gyc5-aaab | FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file. |
CVE-2016-1898
|
| VCID-spc4-d37x-aaap | The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive information from process memory via a crafted h264 video file. |
CVE-2017-7208
|
| VCID-xuwj-zjbq-aaag | The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via the entries value in a dref box in an MP4 file. |
CVE-2016-3062
|
| VCID-zcsn-wgfp-aaak | Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data. |
CVE-2015-3417
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T10:12:26.941282+00:00 | Debian Oval Importer | Fixing | VCID-faq5-mh21-aaac | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T10:03:59.985894+00:00 | Debian Oval Importer | Fixing | VCID-mbzc-hcxh-aaac | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T10:03:22.565035+00:00 | Debian Oval Importer | Fixing | VCID-ptdp-2cht-aaaf | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:57:24.236536+00:00 | Debian Oval Importer | Fixing | VCID-a4jg-f4bk-aaaq | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:56:46.190946+00:00 | Debian Oval Importer | Fixing | VCID-2ntm-6576-aaak | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:56:19.977941+00:00 | Debian Oval Importer | Fixing | VCID-py3m-gyc5-aaab | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:51:17.702344+00:00 | Debian Oval Importer | Fixing | VCID-spc4-d37x-aaap | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:50:04.991766+00:00 | Debian Oval Importer | Fixing | VCID-zcsn-wgfp-aaak | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:48:32.378807+00:00 | Debian Oval Importer | Fixing | VCID-eg6q-kekn-aaas | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:46:26.346137+00:00 | Debian Oval Importer | Fixing | VCID-fz3u-p7uk-aaag | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:45:19.876868+00:00 | Debian Oval Importer | Fixing | VCID-9qcr-482k-aaan | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:45:15.680318+00:00 | Debian Oval Importer | Fixing | VCID-xuwj-zjbq-aaag | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:41:13.741700+00:00 | Debian Oval Importer | Fixing | VCID-61uw-6nqp-aaan | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-21T09:36:41.711090+00:00 | Debian Oval Importer | Fixing | VCID-9qxa-qwwt-aaag | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.3 |
| 2025-06-20T19:51:36.859201+00:00 | Debian Oval Importer | Fixing | VCID-mbzc-hcxh-aaac | None | 36.1.3 |
| 2025-06-20T19:51:34.808672+00:00 | Debian Oval Importer | Fixing | VCID-fz3u-p7uk-aaag | None | 36.1.3 |
| 2025-06-20T19:51:22.778406+00:00 | Debian Oval Importer | Fixing | VCID-eg6q-kekn-aaas | None | 36.1.3 |
| 2025-06-20T19:44:19.354582+00:00 | Debian Oval Importer | Fixing | VCID-faq5-mh21-aaac | None | 36.1.3 |
| 2025-06-20T19:41:40.778157+00:00 | Debian Oval Importer | Fixing | VCID-ptdp-2cht-aaaf | None | 36.1.3 |
| 2025-06-20T19:36:13.202571+00:00 | Debian Oval Importer | Fixing | VCID-xuwj-zjbq-aaag | None | 36.1.3 |
| 2025-06-08T04:01:25.063845+00:00 | Debian Oval Importer | Fixing | VCID-faq5-mh21-aaac | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:53:07.377087+00:00 | Debian Oval Importer | Fixing | VCID-mbzc-hcxh-aaac | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:52:31.988180+00:00 | Debian Oval Importer | Fixing | VCID-ptdp-2cht-aaaf | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:46:23.281975+00:00 | Debian Oval Importer | Fixing | VCID-a4jg-f4bk-aaaq | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:45:43.868330+00:00 | Debian Oval Importer | Fixing | VCID-2ntm-6576-aaak | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:45:15.795827+00:00 | Debian Oval Importer | Fixing | VCID-py3m-gyc5-aaab | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:39:57.346726+00:00 | Debian Oval Importer | Fixing | VCID-spc4-d37x-aaap | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:38:45.262744+00:00 | Debian Oval Importer | Fixing | VCID-zcsn-wgfp-aaak | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:37:13.266146+00:00 | Debian Oval Importer | Fixing | VCID-eg6q-kekn-aaas | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:35:09.591611+00:00 | Debian Oval Importer | Fixing | VCID-fz3u-p7uk-aaag | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:34:02.419477+00:00 | Debian Oval Importer | Fixing | VCID-9qcr-482k-aaan | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:33:57.485030+00:00 | Debian Oval Importer | Fixing | VCID-xuwj-zjbq-aaag | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:29:54.990673+00:00 | Debian Oval Importer | Fixing | VCID-61uw-6nqp-aaan | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-08T03:25:19.443497+00:00 | Debian Oval Importer | Fixing | VCID-9qxa-qwwt-aaag | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.1.0 |
| 2025-06-07T13:43:01.507459+00:00 | Debian Oval Importer | Fixing | VCID-mbzc-hcxh-aaac | None | 36.1.0 |
| 2025-06-07T13:42:59.283091+00:00 | Debian Oval Importer | Fixing | VCID-fz3u-p7uk-aaag | None | 36.1.0 |
| 2025-06-07T13:42:47.290867+00:00 | Debian Oval Importer | Fixing | VCID-eg6q-kekn-aaas | None | 36.1.0 |
| 2025-06-07T13:37:01.412975+00:00 | Debian Oval Importer | Fixing | VCID-faq5-mh21-aaac | None | 36.1.0 |
| 2025-06-07T13:35:09.736009+00:00 | Debian Oval Importer | Fixing | VCID-ptdp-2cht-aaaf | None | 36.1.0 |
| 2025-06-07T13:31:24.303698+00:00 | Debian Oval Importer | Fixing | VCID-xuwj-zjbq-aaag | None | 36.1.0 |
| 2025-04-08T02:29:42.831395+00:00 | Debian Oval Importer | Fixing | VCID-faq5-mh21-aaac | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:20:58.902134+00:00 | Debian Oval Importer | Fixing | VCID-mbzc-hcxh-aaac | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:20:23.366923+00:00 | Debian Oval Importer | Fixing | VCID-ptdp-2cht-aaaf | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:14:13.301588+00:00 | Debian Oval Importer | Fixing | VCID-a4jg-f4bk-aaaq | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:13:32.871619+00:00 | Debian Oval Importer | Fixing | VCID-2ntm-6576-aaak | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:13:01.011983+00:00 | Debian Oval Importer | Fixing | VCID-py3m-gyc5-aaab | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:07:46.269921+00:00 | Debian Oval Importer | Fixing | VCID-spc4-d37x-aaap | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:06:31.744459+00:00 | Debian Oval Importer | Fixing | VCID-zcsn-wgfp-aaak | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:04:54.648669+00:00 | Debian Oval Importer | Fixing | VCID-eg6q-kekn-aaas | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:02:44.248797+00:00 | Debian Oval Importer | Fixing | VCID-fz3u-p7uk-aaag | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:01:33.778936+00:00 | Debian Oval Importer | Fixing | VCID-9qcr-482k-aaan | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T02:01:29.286802+00:00 | Debian Oval Importer | Fixing | VCID-xuwj-zjbq-aaag | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T01:57:23.543667+00:00 | Debian Oval Importer | Fixing | VCID-61uw-6nqp-aaan | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-08T01:52:41.896142+00:00 | Debian Oval Importer | Fixing | VCID-9qxa-qwwt-aaag | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 36.0.0 |
| 2025-04-07T12:18:19.964498+00:00 | Debian Oval Importer | Fixing | VCID-mbzc-hcxh-aaac | None | 36.0.0 |
| 2025-04-07T12:18:17.887487+00:00 | Debian Oval Importer | Fixing | VCID-fz3u-p7uk-aaag | None | 36.0.0 |
| 2025-04-07T12:18:06.117017+00:00 | Debian Oval Importer | Fixing | VCID-eg6q-kekn-aaas | None | 36.0.0 |
| 2025-04-07T12:12:26.979798+00:00 | Debian Oval Importer | Fixing | VCID-faq5-mh21-aaac | None | 36.0.0 |
| 2025-04-07T12:10:35.235217+00:00 | Debian Oval Importer | Fixing | VCID-ptdp-2cht-aaaf | None | 36.0.0 |
| 2025-04-07T12:06:49.497850+00:00 | Debian Oval Importer | Fixing | VCID-xuwj-zjbq-aaag | None | 36.0.0 |