{"id":"CVE-2022-1475","aliases":["DEBIAN-CVE-2022-1475","DSA-5124-1","EUVD-2022-24776","GHSA-gcqf-mvg9-pf79","JLSEC-2025-119","OESA-2024-1873","OESA-2024-1875","OESA-2024-1876","OESA-2024-1877","SUSE-SU-2025:02352-1","UBUNTU-CVE-2022-1475","USN-5472-1","openSUSE-SU-2025:15215-1","openSUSE-SU-2026:20710-1"],"status":"published","title":"An integer overflow vulnerability was found in FFmpeg 5.0.1 and in previous versions in...","description":"An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00931,"percentile":0.60897,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2022-04-25T00:00:00Z","modified":"2026-11-03T08:02:08Z","fixes":[{"ecosystem":"Debian:12","package":"ffmpeg","fixed_in":["7:4.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ffmpeg","fixed_in":["7:4.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ffmpeg","fixed_in":["7:4.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"ffmpeg","fixed_in":["7:4.3.4-0+deb11u1"],"sources":["osv"]},{"ecosystem":"Julia","package":"FFMPEG_jll","fixed_in":["4.4.2+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"FFplay_jll","fixed_in":["4.4.4+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ffmpeg","fixed_in":["7:4.4.2-0ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.3.4-0+deb11u1"}]}],"versions":["7:4.3.2-0+deb11u2","7:4.3.2-1","7:4.3.2-2","7:4.3.3-0+deb11u1"]},{"source":"osv","ecosystem":"Julia","package":"FFMPEG_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"4.3.1+0"},{"fixed":"4.4.2+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"FFplay_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.4.4+0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4-17.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4-17.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4-17.oe2203sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.4-17.oe2203sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150200.11.64.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150200.11.64.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150200.11.64.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150200.11.64.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150200.11.64.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150200.11.64.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150200.11.64.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1"}]}],"versions":["7:4.4-6ubuntu5","7:4.4.1-2ubuntu1","7:4.4.1-3ubuntu1","7:4.4.1-3ubuntu2","7:4.4.1-3ubuntu3","7:4.4.1-3ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.11-0ubuntu0.1"}]}],"versions":["7:3.3.4-2","7:3.3.4-2build3","7:3.4-2ubuntu2","7:3.4-4","7:3.4-4build1","7:3.4.1-1","7:3.4.1-1build1","7:3.4.2-1","7:3.4.2-1build1","7:3.4.2-2","7:3.4.4-0ubuntu0.18.04.1","7:3.4.6-0ubuntu0.18.04.1","7:3.4.8-0ubuntu0.2"],"bundled":34},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.2.7-0ubuntu0.1"}]}],"versions":["7:4.1.4-1build2","7:4.2.1-2","7:4.2.1-2ubuntu1","7:4.2.2-1build1","7:4.2.2-1ubuntu1","7:4.2.4-1ubuntu0.1"],"bundled":34},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1"}]}],"versions":["7:4.4-6ubuntu5","7:4.4.1-2ubuntu1","7:4.4.1-3ubuntu1","7:4.4.1-3ubuntu2","7:4.4.1-3ubuntu3","7:4.4.1-3ubuntu5"],"bundled":34},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ffmpeg-4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.6-4.1"}]}],"bundled":4}],"products":[{"vendor":"ffmpeg","product":"ffmpeg"}],"references":[{"url":"https://trac.ffmpeg.org/ticket/9651","tags":["x_transferred","Exploit","Patch","Vendor Advisory","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076764","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","report","web"]},{"url":"https://security.gentoo.org/glsa/202312-14","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1475","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gcqf-mvg9-pf79"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1475.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-1475","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1873","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-32230","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1875","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1876","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1877","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502352-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198898","tags":["report"]},{"url":"https://bugzilla.suse.com/1234018","tags":["report"]},{"url":"https://bugzilla.suse.com/1234019","tags":["report"]},{"url":"https://bugzilla.suse.com/1234020","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36618","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-1475","tags":["report"]},{"url":"https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=757da974b21833529cc41bdcc9684c29660cdfa8","tags":["report"]},{"url":"https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=e9e2ddbc6c78cc18b76093617f82c920e58a8d1f","tags":["report"]},{"url":"https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=fa2e4afe8d0a23fac37392ef6506cfc9841f8d3d","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5472-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1475","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-20445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-20446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-20450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-20453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-21041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-21688","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-21697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22034","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22036","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22042","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38291","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1220545","tags":["report"]},{"url":"https://bugzilla.suse.com/1223304","tags":["report"]},{"url":"https://bugzilla.suse.com/1226308","tags":["report"]},{"url":"https://bugzilla.suse.com/1226892","tags":["report"]},{"url":"https://bugzilla.suse.com/1226897","tags":["report"]},{"url":"https://bugzilla.suse.com/1226898","tags":["report"]},{"url":"https://bugzilla.suse.com/1226899","tags":["report"]},{"url":"https://bugzilla.suse.com/1226900","tags":["report"]},{"url":"https://bugzilla.suse.com/1226901","tags":["report"]},{"url":"https://bugzilla.suse.com/1230983","tags":["report"]},{"url":"https://bugzilla.suse.com/1246790","tags":["report"]},{"url":"https://bugzilla.suse.com/1251137","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-48368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-51798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7700","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-1475","description":"An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.","status":"published","published":"2022-05-02T00:00:00Z","modified":"2024-08-03T00:03:06.352Z","cwes":["CWE-190"],"updated_at":"2026-11-02T14:34:38.581997Z"}],"euvd":[{"id":"EUVD-2022-24776","description":"An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.","status":"published","published":"2022-05-02T00:00:00Z","modified":"2024-08-03T00:03:06Z","updated_at":"2026-11-03T03:26:01.559181Z"}],"ghsa":[{"id":"GHSA-gcqf-mvg9-pf79","title":"An integer overflow vulnerability was found in FFmpeg 5.0.1 and in previous versions in...","description":"An integer overflow vulnerability was found in FFmpeg 5.0.1 and in previous versions in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.","status":"published","published":"2022-05-03T00:00:37Z","modified":"2023-12-23T12:30:17Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:55:16.323735Z"}],"nvd":[{"id":"CVE-2022-1475","description":"An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.","status":"published","published":"2022-05-02T19:15:08.977Z","modified":"2026-06-17T04:22:31.343Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:07:18.660414Z"}],"osv":[{"id":"DEBIAN-CVE-2022-1475","description":"An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.","status":"published","published":"2022-05-02T19:15:08.977Z","modified":"2026-11-03T08:02:08.289955313Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"JLSEC-2025-119","title":"An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in...","description":"An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in `g729_parse()` in `llibavcodec/g729_parser.c` when processing a specially crafted file.","status":"published","published":"2025-10-19T19:08:53.76Z","modified":"2026-07-23T22:30:07.620942671Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2024-1873","title":"ffmpeg security update","description":"FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash.\r\n\r\nSecurity Fix(es):\r\n\r\nAn integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.(CVE-2022-1475)\r\n\r\nlibavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).(CVE-2022-48434)\r\n\r\nFFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0(CVE-2024-32230)","status":"published","published":"2024-07-19T11:07:20Z","modified":"2026-08-18T01:18:30.209727716Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-1875","title":"ffmpeg security update","description":"FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash.\r\n\r\nSecurity Fix(es):\r\n\r\nAn integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.(CVE-2022-1475)\r\n\r\nlibavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).(CVE-2022-48434)\r\n\r\nFFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0(CVE-2024-32230)","status":"published","published":"2024-07-19T11:07:20Z","modified":"2026-08-18T01:18:30.222089515Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-1876","title":"ffmpeg security update","description":"FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash.\r\n\r\nSecurity Fix(es):\r\n\r\nAn integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.(CVE-2022-1475)\r\n\r\nlibavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).(CVE-2022-48434)\r\n\r\nFFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0(CVE-2024-32230)","status":"published","published":"2024-07-19T11:07:20Z","modified":"2026-08-18T01:18:30.235291643Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-1877","title":"ffmpeg security update","description":"FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash.\r\n\r\nSecurity Fix(es):\r\n\r\nAn integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.(CVE-2022-1475)\r\n\r\nlibavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).(CVE-2022-48434)\r\n\r\nFFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0(CVE-2024-32230)","status":"published","published":"2024-07-19T11:07:20Z","modified":"2026-08-18T01:18:30.21874832Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"UBUNTU-CVE-2022-1475","description":"An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.","status":"published","published":"2022-05-02T19:15:00Z","modified":"2026-04-22T13:13:51.888622Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"CVE-2022-1475","description":"An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.","status":"published","published":"2022-05-02T00:00:00Z","modified":"2026-11-07T10:47:10.764814392Z","cwes":["CWE-190"],"updated_at":"2026-11-07T11:15:38.581573Z"},{"id":"DSA-5124-1","title":"ffmpeg - security update","status":"published","published":"2022-04-25T00:00:00Z","modified":"2026-03-09T02:09:07.752779Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2025:15215-1","title":"ffmpeg-4-4.4.6-4.1 on GA media","description":"These are all security issues fixed in the ffmpeg-4-4.4.6-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:30.087925Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2026:20710-1","title":"Security update for ffmpeg-4","description":"This update for ffmpeg-4 fixes the following issues:\n\nChanges in ffmpeg-4:\n\n- CVE-2025-59728: Fixed out-of-bounds NUL-byte write when calculating the content path in handling of MPEG-DASH manifests (bsc#1251137).\n- CVE-2025-7700: Fixed a NULL Pointer Dereference in the ALS Decoder (bsc#1246790)\n- CVE-2024-36618: Fixed a integer overflow in AVI demuxer (bsc#1234020)\n- CVE-2023-6601: Fixed HLS Unsafe File Extension Bypass (bsc#1220545).\n\n- Update to release 4.4.6\n  * lavc/libx265: unbreak build for X265_BUILD \u003e= 210\n  * ARM: vp9mc: Load only 12 pixels in the 4 pixel wide\n    horizontal filter\n  * rtmpproto: Avoid rare crashes in the `fail:` codepath in\n    rtmp_open\n  * avcodec/snow: Fix off by 1 error in run_buffer\n  * avcodec/mpegvideo_enc: Check FLV1 resolution limits\n","status":"published","published":"2026-05-09T08:50:33Z","modified":"2026-05-11T08:15:31.297138Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2025:02352-1","title":"Security update for ffmpeg","description":"This update for ffmpeg fixes the following issues:\n\n- CVE-2022-1475: Fixed integer overflow in g729_parse() in llibavcodec/g729_parser.c (bsc#1198898).\n- CVE-2024-36616: Fixed integer overflow in the component libavformat/westwood_vqa.c (bsc#1234018).\n- CVE-2024-36617: Fixed integer overflow vulnerability in the FFmpeg CAF decoder (bsc#1234019).\n- CVE-2024-36618: Fixed vulnerability in the AVI demuxer of the libavformat library (bsc#1234020).\n","status":"published","published":"2025-07-17T12:33:21Z","modified":"2026-03-23T04:47:44.244244Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"USN-5472-1","title":"ffmpeg vulnerabilities","description":"It was discovered that FFmpeg would attempt to divide by zero when using Linear\nPredictive Coding (LPC) or AAC codecs. An attacker could possibly use this\nissue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS and Ubuntu 21.10. (CVE-2020-20445, CVE-2020-20446,\nCVE-2020-20453)\n\nIt was discovered that FFmpeg incorrectly handled certain input. An attacker\ncould possibly use this issue to cause a denial of service. This issue only\naffected Ubuntu 20.04 LTS. (CVE-2020-20450)\n\nIt was discovered that FFmpeg incorrectly handled file conversion to APNG\nformat. An attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2020-21041)\n\nIt was discovered that FFmpeg incorrectly handled remuxing RTP-hint tracks.\nA remote attacker could possibly use this issue to execute arbitrary code.\nThis issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2020-21688)\n\nIt was discovered that FFmpeg incorrectly handled certain specially crafted\nAVI files. An attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2020-21697)\n\nIt was discovered that FFmpeg incorrectly handled writing MOV video tags. An\nattacker could possibly use this issue to cause a denial of service, obtain\nsensitive information or execute arbitrary code. This issue only affected\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 21.10. (CVE-2020-22015)\n\nIt was discovered that FFmpeg incorrectly handled writing MOV files. An\nattacker could possibly use this issue to cause a denial of service or other\nunspecified impact. This issue affected only Ubuntu 18.04 LTS. (CVE-2020-22016)\n\nIt was discovered that FFmpeg incorrectly handled memory when using certain\nfilters. An attacker could possibly use this issue to cause a denial of service\nor other unspecified impact. This issue only affected Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. (CVE-2020-22017, CVE-2020-22020, CVE-2020-22022,\nCVE-2020-22023, CVE-2022-22025, CVE-2020-22026, CVE-2020-22028, CVE-2020-22031,\nCVE-2020-22032, CVE-2020-22034, CVE-2020-22036, CVE-2020-22042)\n\nIt was discovered that FFmpeg incorrectly handled memory when using certain\nfilters. An attacker could possibly use this issue to cause a denial of service\nor other unspecified impact. This issue only affected Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS and Ubuntu 21.10. (CVE-2020-22019, CVE-2020-22021,\nCVE-2020-22033)\n\nIt was discovered that FFmpeg incorrectly handled memory when using certain\nfilters. An attacker could possibly use this issue to cause a denial of service\nor other unspecified impact. This issue only affected Ubuntu 21.10.\n(CVE-2020-22027, CVE-2020-22029, CVE-2020-22030, CVE-2020-22035)\n\nIt was discovered that FFmpeg incorrectly handled certain specially crafted\nJPEG files. An attacker could possibly use this issue to obtain sensitive\ninformation. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and\nUbuntu 21.10. (CVE-2020-22037)\n\nIt was discovered that FFmpeg incorrectly performed calculations in EXR codec.\nAn attacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-35965)\n\nIt was discovered that FFmpeg did not verify return values of functions\ninit_vlc and init_get_bits. An attacker could possibly use this issue to cause\na denial of service or other unspecified impact. This issue only affected\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 21.10. (CVE-2021-38114,\nCVE-2021-38171)\n\nIt was discovered that FFmpeg incorrectly handled certain specially crafted\nfiles. An attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 21.10 and Ubuntu 22.04 LTS. (CVE-2022-1475)\n","status":"published","published":"2022-06-08T11:54:47Z","modified":"2026-04-27T16:19:02.02518084Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}