ffmpeg vulnerabilities (Debian)
471 vulnerabilities.
ffmpegDebianFFmpeg 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because...5.5 MediumffmpegDebiancbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.2.2 has a heap-based buffer overflow...9.8 CriticalffmpegDebianIn FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and...9.8 CriticalffmpegDebianFFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array...9.8 CriticalffmpegDebianIn FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in libavformat/rawenc.c. This...6.5 MediumffmpegDebianaa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 does not check for sscanf failure...9.8 CriticalffmpegDebianThe studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1...8.8 HighffmpegDebianlibavcodec/hevcdec.c in FFmpeg 4.1.2 mishandles detection of duplicate first slices, which allows...8.8 HighffmpegDebianA denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU...6.5 MediumffmpegDebianIn FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the...6.5 MediumffmpegDebianFFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in...6.5 MediumffmpegDebianThe flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an...7.5 HighffmpegDebianFFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read...6.5 MediumffmpegDebianFFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access...6.5 MediumffmpegDebianFFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow...8.8 HighffmpegDebianlibavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service ...6.5 MediumffmpegDebianFFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free...6.5 MediumffmpegDebianFFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop...6.5 MediumffmpegDebianFFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array...9.8 CriticalffmpegDebianlibavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service ...6.5 MediumffmpegDebianIn libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context...6.5 MediumffmpegDebianIn FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the...6.5 MediumffmpegDebianIn FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that...8.8 HighffmpegDebianIn FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the...6.5 MediumffmpegDebianIn FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the...8.1 HighffmpegDebianAn inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function in...6.5 MediumffmpegDebianAn improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in...6.5 MediumffmpegDebianThe svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers...6.5 MediumffmpegDebianThe decode_init function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote...6.5 MediumffmpegDebianThe export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows remote attackers...8.8 HighffmpegDebianThe decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote...6.5 MediumffmpegDebianThe decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote...6.5 MediumffmpegDebianLibavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted...8.8 HighffmpegDebianLibavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted...8.8 HighffmpegDebianThe decode_frame function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote...6.5 MediumffmpegDebianThe filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote...6.5 MediumffmpegDebianInteger underflow in the mov_read_default function in libavformat/mov.c in FFmpeg before 2.4.6...5.5 MediumffmpegDebianIn line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017...6.5 MediumffmpegDebianThe gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly...6.5 MediumffmpegDebianThe VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a...9.8 CriticalffmpegDebianIn Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec...7.5 HighffmpegDebianThe read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier...8.8 HighffmpegDebianDouble free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial...6.5 MediumffmpegDebianThe sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4...8.8 HighffmpegDebianThe av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL...8.8 HighffmpegDebianIn libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an...6.5 MediumffmpegDebianIn libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File)...6.5 MediumffmpegDebianIn libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of...6.5 MediumffmpegDebianIn libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, a DoS in mxf_read_index_entry_array() due to lack...6.5 MediumffmpegDebianIn the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, an integer...8.8 High- Show moreLoading…