Search for packages
| purl | pkg:deb/debian/ffmpeg@7:4.3.7-0%2Bdeb11u1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-28q2-kc62-nqad
Aliases: CVE-2024-36615 |
FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread. |
Affected by 3 other vulnerabilities. |
|
VCID-6r1f-cgtt-dqdp
Aliases: CVE-2024-35368 |
FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. |
Affected by 20 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-71ny-c9kz-1uc1
Aliases: CVE-2020-22038 |
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c. |
Affected by 20 other vulnerabilities. |
|
VCID-a4su-jd5k-2yeb
Aliases: CVE-2023-6601 |
A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions. |
Affected by 20 other vulnerabilities. |
|
VCID-efgw-kuzg-tqe9
Aliases: CVE-2024-36618 |
FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. |
Affected by 20 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-etvd-ankr-mkcp
Aliases: CVE-2024-7055 |
A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651. |
Affected by 20 other vulnerabilities. |
|
VCID-fv2s-79bs-rkb9
Aliases: CVE-2025-0518 |
Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C . This issue affects FFmpeg: 7.1. Issue was fixed:Â https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman |
Affected by 20 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-hjyb-9ecy-vudm
Aliases: CVE-2024-31578 |
FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function. |
Affected by 20 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-phup-wqsk-xfgx
Aliases: CVE-2025-22919 |
A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (DoS) via opening a crafted AAC file. |
Affected by 20 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-q2kd-rxdb-uke9
Aliases: CVE-2023-6602 |
A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists. |
Affected by 20 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-qk2b-vmun-vbcv
Aliases: CVE-2023-49502 |
Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in the libavfilter/bwdifdsp.c:125:5 component. |
Affected by 20 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-v8p4-ymb2-3bbe
Aliases: CVE-2024-35367 |
FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer |
Affected by 20 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-vaam-6ttk-bycu
Aliases: CVE-2025-22921 |
FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c. |
Affected by 20 other vulnerabilities. |
|
VCID-vdx4-n19y-pyek
Aliases: CVE-2023-6604 |
A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation. |
Affected by 20 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-y1yy-qzr5-hyeq
Aliases: CVE-2023-6605 |
A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs. |
Affected by 20 other vulnerabilities. Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-197d-dvje-5ydf | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, which might lead to memory corruption and other potential consequences. |
CVE-2020-22030
|
| VCID-1azu-tjxp-fbdb | FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. |
CVE-2024-36617
|
| VCID-1gt1-fa3j-r3gt | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might lead to memory corruption and other potential consequences. |
CVE-2020-22036
|
| VCID-1v4k-an2h-tfgf | FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0 |
CVE-2024-32230
|
| VCID-1vwm-4tm2-hkcp | Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
CVE-2020-20891
|
| VCID-24h6-xhra-kuhp | A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file. |
CVE-2020-21697
|
| VCID-2ajt-9j5v-tyhv | Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c. |
CVE-2020-20451
|
| VCID-33hr-qpc9-17d7 | libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868. |
CVE-2021-38114
|
| VCID-3rs1-694y-ufa7 | A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c. |
CVE-2020-22040
|
| VCID-3sd1-ahua-vke1 | An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability. |
CVE-2022-3109
|
| VCID-4797-5n6w-3bhx | FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c. |
CVE-2020-13904
|
| VCID-56b6-87ft-f3g8 | FFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.c calls ff_dnn_load_model_native and a certain index check is omitted. |
CVE-2020-14212
|
| VCID-5pqs-azp7-kbcy | An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file. |
CVE-2022-1475
|
| VCID-5sp2-xmzg-q3hw | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c. |
CVE-2020-22044
|
| VCID-5vc7-ueap-yuff | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c. |
CVE-2020-22056
|
| VCID-5wsp-aybc-2qdn | denial of service |
CVE-2020-20448
|
| VCID-6fn2-vpx4-nfd8 | FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff_gradfun_blur_line_movdqa_sse2, as demonstrated by a call to the set_encoder_id function in /fftools/ffmpeg_enc.c component. |
CVE-2023-50010
|
| VCID-6vq4-h9k1-9qgv | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c. |
CVE-2020-22043
|
| VCID-7cwr-dhac-u7gn | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c. |
CVE-2020-22054
|
| VCID-7fq9-xmxt-cyas | In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer. |
CVE-2019-17539
|
| VCID-7pxm-65g7-vyc4 | An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero. |
CVE-2020-20892
|
| VCID-7yp3-r9z7-43gw | Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
CVE-2021-38090
|
| VCID-8su1-5nud-b7eb | Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service. |
CVE-2020-22028
|
| VCID-8zqx-rrht-ykau | A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory corruption and other potential consequences. |
CVE-2020-22034
|
| VCID-922v-n1jb-wfer | A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, which might lead to memory corruption and other potential consequences. |
CVE-2020-22031
|
| VCID-9hs8-t6t6-aqbp | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c. |
CVE-2020-22048
|
| VCID-a3mj-anjs-ebc5 | Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
CVE-2021-38094
|
| VCID-a7qx-thca-b7cv | FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service |
CVE-2020-20453
|
| VCID-a8c3-cue1-8ygt | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function. |
CVE-2020-22039
|
| VCID-a8hw-hu9g-73gn | An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference. |
CVE-2020-20896
|
| VCID-aa8t-q329-8ugu | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c. |
CVE-2020-22037
|
| VCID-ar29-g7b1-7uhh | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which might lead to memory corruption and other potential consequences. |
CVE-2020-22022
|
| VCID-axka-xp8p-vkap | cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check. |
CVE-2020-12284
|
| VCID-be1k-dfpx-57hr | An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file. |
CVE-2024-36616
|
| VCID-bnuf-8372-wfb2 | Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of Service. |
CVE-2020-22024
|
| VCID-c5jn-6sjn-wqbw | libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used). |
CVE-2022-48434
|
| VCID-cejz-6xf4-nufv | Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via a floating point exception (FPE) error at libavfilter/vf_minterpolate.c:1078:60 in interpolate. |
CVE-2023-51798
|
| VCID-cgke-srqt-9qe6 | Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavutil/imgutils.c:353:9 in image_copy_plane. |
CVE-2023-51793
|
| VCID-d1fw-gxru-8qdy | adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a necessary step because the second argument to init_get_bits can be crafted. |
CVE-2021-38171
|
| VCID-ddbr-4wva-zfge | Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
CVE-2021-38092
|
| VCID-djza-2cjj-xydm | security update |
DSA-5268-1 ffmpeg
|
| VCID-egqg-zn7q-kkd8 | Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Service. |
CVE-2020-22019
|
| VCID-eqw7-bt3f-77hf | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c. |
CVE-2020-22051
|
| VCID-fkkq-53wv-1bex | FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause a Denial of Service. |
CVE-2020-20446
|
| VCID-fq9b-uaeq-77fb | A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, which might lead to memory corruption and other potential consequences. |
CVE-2020-22023
|
| VCID-g97k-9s7w-j3c8 | FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity. |
CVE-2020-23906
|
| VCID-gm3q-6fes-zqa1 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graphparser.c. |
CVE-2020-22042
|
| VCID-gnpa-dfa4-87dw | In FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in libavformat/rawenc.c. |
CVE-2019-13390
|
| VCID-gr41-6sqp-h7fs | track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing. |
CVE-2020-35964
|
| VCID-hc6n-8pnw-83cn | FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c. |
CVE-2019-17542
|
| VCID-hg6a-enc1-skbh | Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a Denial of Service. |
CVE-2020-22026
|
| VCID-hzzt-4dkj-cyg5 | A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash. |
CVE-2022-3341
|
| VCID-j17u-k3j3-m7g8 | FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service. |
CVE-2020-20450
|
| VCID-k93q-2e7m-9kfq | Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
CVE-2021-38091
|
| VCID-kgyh-uv25-6fhp | Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Denial of Service. |
CVE-2020-22020
|
| VCID-mu5w-y7tz-wqc6 | A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which might lead to memory corruption and other potential consequences. |
CVE-2020-22032
|
| VCID-p6mp-drus-f7ax | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c. |
CVE-2020-22046
|
| VCID-pyyb-dcpx-p7a9 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc. |
CVE-2020-22041
|
| VCID-qumq-fjyp-bkhg | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences. |
CVE-2020-22017
|
| VCID-raq7-r795-hba8 | A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that could result in disclosure of information. |
CVE-2020-20902
|
| VCID-s91u-kkqh-b3h1 | Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/af_stereowiden.c:120:69. |
CVE-2023-51794
|
| VCID-scvy-tdpc-g7de | A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, which could let a remote malicious user cause a Denial of Service. |
CVE-2020-22033
|
| VCID-stk8-u4eh-kyga | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might lead to memory corruption and other potential consequences. |
CVE-2020-22035
|
| VCID-tpyd-2g2s-fyde | Integer Overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
CVE-2020-20898
|
| VCID-ume3-wc21-rqc4 | A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might lead to memory corruption and other potential consequences. |
CVE-2020-22027
|
| VCID-usfk-2ghs-nyha | FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion failure at src/libavutil/mathematics.c. |
CVE-2021-38291
|
| VCID-uvtq-g7te-bkdk | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c. |
CVE-2020-22049
|
| VCID-vban-9r18-rqdx | Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service |
CVE-2020-21041
|
| VCID-vjvd-te49-k3h3 | Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Service. |
CVE-2020-22021
|
| VCID-wrne-g7ee-2fcq | A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might lead to memory corruption and other potential consequences. |
CVE-2020-22016
|
| VCID-wrzb-t3f1-tqhn | FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service. |
CVE-2020-20445
|
| VCID-y64m-axtx-fuc5 | FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service (DoS) condition or other undefined behavior. |
CVE-2024-36613
|
| VCID-yd1v-xm1z-4ke2 | A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code. |
CVE-2020-21688
|
| VCID-ywc1-4enx-6bdh | Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code. |
CVE-2020-22015
|
| VCID-yxf7-d4h2-4bb4 | Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
CVE-2021-38093
|
| VCID-z2bg-dgha-xuhc | A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to memory corruption and other potential consequences. |
CVE-2020-22025
|
| VCID-z3nq-j291-a7a4 | Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim (as long as the `-vcodec copy` option is passed to ffmpeg). |
CVE-2021-3566
|
| VCID-z46c-5x7w-kbam | decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations. |
CVE-2020-35965
|
| VCID-zgw9-f5f8-fygv | FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking. |
CVE-2024-35366
|
| VCID-zn8x-u8bm-hbdp | Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service (DoS) via crafted .mov file. |
CVE-2021-28429
|
| VCID-zvzw-mq4g-7bau | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, which might lead to memory corruption and other potential consequences. |
CVE-2020-22029
|