Search for packages
Package details: pkg:ebuild/media-video/ffmpeg@4
purl pkg:ebuild/media-video/ffmpeg@4
Next non-vulnerable version 4.2.0
Latest non-vulnerable version 6.0
Risk 4.4
Vulnerabilities affecting this package (10)
Vulnerability Summary Fixed by
VCID-9aua-7ce1-aaap
Aliases:
CVE-2019-13390
In FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in libavformat/rawenc.c.
4.2.0
Affected by 0 other vulnerabilities.
VCID-gm7x-n9ub-aaak
Aliases:
CVE-2019-17542
FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c.
4.2.0
Affected by 0 other vulnerabilities.
VCID-j9je-s5ab-aaah
Aliases:
CVE-2019-13312
block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read.
4.2.0
Affected by 0 other vulnerabilities.
4.2.4
Affected by 0 other vulnerabilities.
VCID-jkhj-2usb-aaaf
Aliases:
CVE-2019-12730
aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables.
4.2.0
Affected by 0 other vulnerabilities.
VCID-k7pc-r371-aaas
Aliases:
CVE-2018-10001
The decode_init function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via an AVI file.
4.2.0
Affected by 0 other vulnerabilities.
VCID-kfuh-tb3c-aaar
Aliases:
CVE-2018-7751
The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file.
4.2.0
Affected by 0 other vulnerabilities.
VCID-qak4-m8wy-aaag
Aliases:
CVE-2018-7557
The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service (Out of array read) via an AVI file with crafted dimensions within chroma subsampling data.
4.2.0
Affected by 0 other vulnerabilities.
VCID-qfj7-s9pz-aaaq
Aliases:
CVE-2018-6912
The decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file.
4.2.0
Affected by 0 other vulnerabilities.
VCID-uw9m-efdf-aaan
Aliases:
CVE-2018-9841
The export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a long filename.
4.2.0
Affected by 0 other vulnerabilities.
VCID-vmn5-9pwf-aaar
Aliases:
CVE-2019-17539
In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer.
4.2.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T12:40:06.775118+00:00 Gentoo Importer Affected by VCID-gm7x-n9ub-aaak https://security.gentoo.org/glsa/202003-65 36.0.0
2025-03-28T12:40:06.758665+00:00 Gentoo Importer Affected by VCID-vmn5-9pwf-aaar https://security.gentoo.org/glsa/202003-65 36.0.0
2025-03-28T12:40:06.742119+00:00 Gentoo Importer Affected by VCID-9aua-7ce1-aaap https://security.gentoo.org/glsa/202003-65 36.0.0
2025-03-28T12:40:06.725670+00:00 Gentoo Importer Affected by VCID-j9je-s5ab-aaah https://security.gentoo.org/glsa/202003-65 36.0.0
2025-03-28T12:40:06.709183+00:00 Gentoo Importer Affected by VCID-jkhj-2usb-aaaf https://security.gentoo.org/glsa/202003-65 36.0.0
2025-03-28T12:40:06.692786+00:00 Gentoo Importer Affected by VCID-uw9m-efdf-aaan https://security.gentoo.org/glsa/202003-65 36.0.0
2025-03-28T12:40:06.676510+00:00 Gentoo Importer Affected by VCID-kfuh-tb3c-aaar https://security.gentoo.org/glsa/202003-65 36.0.0
2025-03-28T12:40:06.660204+00:00 Gentoo Importer Affected by VCID-qak4-m8wy-aaag https://security.gentoo.org/glsa/202003-65 36.0.0
2025-03-28T12:40:06.644007+00:00 Gentoo Importer Affected by VCID-qfj7-s9pz-aaaq https://security.gentoo.org/glsa/202003-65 36.0.0
2025-03-28T12:40:06.627712+00:00 Gentoo Importer Affected by VCID-k7pc-r371-aaas https://security.gentoo.org/glsa/202003-65 36.0.0
2024-09-18T07:33:57.869072+00:00 Gentoo Importer Affected by VCID-gm7x-n9ub-aaak https://security.gentoo.org/glsa/202003-65 34.0.1
2024-09-18T07:33:57.845096+00:00 Gentoo Importer Affected by VCID-vmn5-9pwf-aaar https://security.gentoo.org/glsa/202003-65 34.0.1
2024-09-18T07:33:57.822087+00:00 Gentoo Importer Affected by VCID-9aua-7ce1-aaap https://security.gentoo.org/glsa/202003-65 34.0.1
2024-09-18T07:33:57.799511+00:00 Gentoo Importer Affected by VCID-j9je-s5ab-aaah https://security.gentoo.org/glsa/202003-65 34.0.1
2024-09-18T07:33:57.775631+00:00 Gentoo Importer Affected by VCID-jkhj-2usb-aaaf https://security.gentoo.org/glsa/202003-65 34.0.1
2024-09-18T07:33:57.752141+00:00 Gentoo Importer Affected by VCID-uw9m-efdf-aaan https://security.gentoo.org/glsa/202003-65 34.0.1
2024-09-18T07:33:57.730803+00:00 Gentoo Importer Affected by VCID-kfuh-tb3c-aaar https://security.gentoo.org/glsa/202003-65 34.0.1
2024-09-18T07:33:57.707588+00:00 Gentoo Importer Affected by VCID-qak4-m8wy-aaag https://security.gentoo.org/glsa/202003-65 34.0.1
2024-09-18T07:33:57.684660+00:00 Gentoo Importer Affected by VCID-qfj7-s9pz-aaaq https://security.gentoo.org/glsa/202003-65 34.0.1
2024-09-18T07:33:57.661644+00:00 Gentoo Importer Affected by VCID-k7pc-r371-aaas https://security.gentoo.org/glsa/202003-65 34.0.1
2024-01-04T01:40:18.983813+00:00 Gentoo Importer Affected by VCID-gm7x-n9ub-aaak https://security.gentoo.org/glsa/202003-65 34.0.0rc1
2024-01-04T01:40:18.959864+00:00 Gentoo Importer Affected by VCID-vmn5-9pwf-aaar https://security.gentoo.org/glsa/202003-65 34.0.0rc1
2024-01-04T01:40:18.941989+00:00 Gentoo Importer Affected by VCID-9aua-7ce1-aaap https://security.gentoo.org/glsa/202003-65 34.0.0rc1
2024-01-04T01:40:18.925725+00:00 Gentoo Importer Affected by VCID-j9je-s5ab-aaah https://security.gentoo.org/glsa/202003-65 34.0.0rc1
2024-01-04T01:40:18.909023+00:00 Gentoo Importer Affected by VCID-jkhj-2usb-aaaf https://security.gentoo.org/glsa/202003-65 34.0.0rc1
2024-01-04T01:40:18.892831+00:00 Gentoo Importer Affected by VCID-uw9m-efdf-aaan https://security.gentoo.org/glsa/202003-65 34.0.0rc1
2024-01-04T01:40:18.876528+00:00 Gentoo Importer Affected by VCID-kfuh-tb3c-aaar https://security.gentoo.org/glsa/202003-65 34.0.0rc1
2024-01-04T01:40:18.860377+00:00 Gentoo Importer Affected by VCID-qak4-m8wy-aaag https://security.gentoo.org/glsa/202003-65 34.0.0rc1
2024-01-04T01:40:18.841916+00:00 Gentoo Importer Affected by VCID-qfj7-s9pz-aaaq https://security.gentoo.org/glsa/202003-65 34.0.0rc1
2024-01-04T01:40:18.823393+00:00 Gentoo Importer Affected by VCID-k7pc-r371-aaas https://security.gentoo.org/glsa/202003-65 34.0.0rc1