Search for packages
Package details: pkg:ebuild/media-video/ffmpeg@4.2.4
purl pkg:ebuild/media-video/ffmpeg@4.2.4
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (5)
Vulnerability Summary Aliases
VCID-1d9c-ks7z-aaar FFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.c calls ff_dnn_load_model_native and a certain index check is omitted. CVE-2020-14212
VCID-4kfh-pqwk-aaam cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check. CVE-2020-12284
VCID-j9je-s5ab-aaah block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read. CVE-2019-13312
VCID-pdga-yrz9-aaar FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c. CVE-2020-13904
VCID-qd93-ejp7-aaah FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer. CVE-2019-15942

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T13:04:18.005008+00:00 Gentoo Importer Fixing VCID-1d9c-ks7z-aaar https://security.gentoo.org/glsa/202007-58 36.0.0
2025-03-28T13:04:17.994893+00:00 Gentoo Importer Fixing VCID-pdga-yrz9-aaar https://security.gentoo.org/glsa/202007-58 36.0.0
2025-03-28T13:04:17.984599+00:00 Gentoo Importer Fixing VCID-4kfh-pqwk-aaam https://security.gentoo.org/glsa/202007-58 36.0.0
2025-03-28T13:04:17.974372+00:00 Gentoo Importer Fixing VCID-qd93-ejp7-aaah https://security.gentoo.org/glsa/202007-58 36.0.0
2025-03-28T13:04:17.964063+00:00 Gentoo Importer Fixing VCID-j9je-s5ab-aaah https://security.gentoo.org/glsa/202007-58 36.0.0
2024-09-18T07:58:21.983334+00:00 Gentoo Importer Fixing VCID-1d9c-ks7z-aaar https://security.gentoo.org/glsa/202007-58 34.0.1
2024-09-18T07:58:21.965016+00:00 Gentoo Importer Fixing VCID-pdga-yrz9-aaar https://security.gentoo.org/glsa/202007-58 34.0.1
2024-09-18T07:58:21.946104+00:00 Gentoo Importer Fixing VCID-4kfh-pqwk-aaam https://security.gentoo.org/glsa/202007-58 34.0.1
2024-09-18T07:58:21.930013+00:00 Gentoo Importer Fixing VCID-qd93-ejp7-aaah https://security.gentoo.org/glsa/202007-58 34.0.1
2024-09-18T07:58:21.912684+00:00 Gentoo Importer Fixing VCID-j9je-s5ab-aaah https://security.gentoo.org/glsa/202007-58 34.0.1
2024-01-04T02:03:05.667876+00:00 Gentoo Importer Fixing VCID-1d9c-ks7z-aaar https://security.gentoo.org/glsa/202007-58 34.0.0rc1
2024-01-04T02:03:05.656432+00:00 Gentoo Importer Fixing VCID-pdga-yrz9-aaar https://security.gentoo.org/glsa/202007-58 34.0.0rc1
2024-01-04T02:03:05.641462+00:00 Gentoo Importer Fixing VCID-4kfh-pqwk-aaam https://security.gentoo.org/glsa/202007-58 34.0.0rc1
2024-01-04T02:03:05.624963+00:00 Gentoo Importer Fixing VCID-qd93-ejp7-aaah https://security.gentoo.org/glsa/202007-58 34.0.0rc1
2024-01-04T02:03:05.608223+00:00 Gentoo Importer Fixing VCID-j9je-s5ab-aaah https://security.gentoo.org/glsa/202007-58 34.0.0rc1