Skip to contentFfmpeg vulnerabilities
Newest
- ffmpeg, debian linux +1 moreUse-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg...CVE-2015-3417Fix available6.8 Medium
- ffmpegThe seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free...CVE-2014-9676Fix available6.8 Medium
- ffmpeg, google chrome +1 moreMultiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google...CVE-2014-7937Fix available7.5 High
- ffmpeg, google chrome +1 moreUse-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in...CVE-2014-7933Fix available7.5 High
- ffmpegThe vmd_decode function in libavcodec/vmdvideo.c in FFmpeg before 2.5.2 does not validate the...CVE-2014-9603Fix available7.5 High
- ffmpeglibavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions...CVE-2014-9602Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height,...CVE-2014-9604Fix available7.5 High
- ffmpegThe ff_hevc_decode_nal_sps function in libavcodec/hevc_ps.c in FFMpeg before 2.1.6, 2.2.x through...CVE-2014-9319Fix available5.0 Medium
- ffmpegThe raw_decode function in libavcodec/rawdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x, and 2...CVE-2014-9318Fix available7.5 High
- ffmpegThe decode_ihdr_chunk function in libavcodec/pngdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3.x...CVE-2014-9317Fix available7.5 High
- ffmpegThe mjpeg_decode_app function in libavcodec/mjpegdec.c in FFMpeg before 2.1.6, 2.2.x through 2.3...CVE-2014-9316Fix available7.5 High
- ffmpeglibavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2...CVE-2014-8549Fix available7.5 High
- ffmpegInteger underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause...CVE-2014-8546Fix available7.5 High
- ffmpeglibavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying...CVE-2014-8545Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 moreOff-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a...CVE-2014-8548Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows...CVE-2014-8547Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which...CVE-2014-8544Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks...CVE-2014-8543Fix available7.5 High
- ffmpeg, canonical ubuntu linux, debian linux +2 morelibavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of...CVE-2014-8542Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits...CVE-2014-8541Fix available7.5 High
- ffmpeglibavcodec/iff.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.2.x before 2.2.7, and 2.3.x...CVE-2014-5272Fix available6.8 Medium
- ffmpeg, libav +1 moreHeap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in...CVE-2014-52717.5 High
- ffmpegInteger overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x...CVE-2014-4610Fix available8.8 High
- ffmpegThe msrle_decode_frame function in libavcodec/msrle.c in FFmpeg before 2.1.4 does not properly...CVE-2014-20996.8 Medium
- ffmpeglibavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for...CVE-2014-20986.8 Medium
- ffmpegThe tak_decode_frame function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly...CVE-2014-20976.8 Medium
- ffmpegThe mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat...CVE-2014-2263Fix available6.8 Medium
- ffmpegThe av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running...CVE-2012-6618Fix available2.6 Low
- ffmpegThe prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers...CVE-2012-66174.3 Medium
- ffmpegThe mov_text_decode_frame function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows...CVE-2012-66165.0 Medium
- ffmpegThe ff_ass_split_override_codes function in libavcodec/ass_split.c in FFmpeg before 1.0.2 allows...CVE-2012-66154.3 Medium
- ffmpeglibavcodec/h264.c in FFmpeg before 0.11.4 allows remote attackers to cause a denial of service ...CVE-2013-43585.0 Medium
- ffmpegThe jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not...CVE-2013-70246.8 Medium
- ffmpegThe ff_combine_frame function in libavcodec/parser.c in FFmpeg before 2.1 does not properly...CVE-2013-70236.8 Medium
- ffmpegThe g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 does not properly...CVE-2013-70226.8 Medium
- ffmpegThe filter_frame function in libavfilter/vf_fps.c in FFmpeg before 2.1 does not properly ensure...CVE-2013-70216.8 Medium
- ffmpeg, debian linux +1 moreThe read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce...CVE-2013-7020Fix available6.8 Medium
- ffmpegThe get_cox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not properly validate...CVE-2013-70196.8 Medium
- ffmpeglibavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use of valid code-block...CVE-2013-70186.8 Medium
- ffmpeglibavcodec/jpeg2000.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service ...CVE-2013-70176.8 Medium
- ffmpegThe get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the...CVE-2013-70166.8 Medium
- ffmpegThe flashsv_decode_frame function in libavcodec/flashsv.c in FFmpeg before 2.1 does not properly...CVE-2013-7015Fix available6.8 Medium
- ffmpegInteger signedness error in the add_bytes_l2_c function in libavcodec/pngdsp.c in FFmpeg before 2...CVE-2013-70146.8 Medium
- ffmpegThe g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 uses an incorrect...CVE-2013-70136.8 Medium
- ffmpegThe get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not prevent attempts...CVE-2013-70126.8 Medium
- ffmpegThe read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not prevent changes to...CVE-2013-7011Fix available6.8 Medium
- ffmpegMultiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote...CVE-2013-7010Fix available6.8 Medium
- ffmpegThe rpza_decode_stream function in libavcodec/rpza.c in FFmpeg before 2.1 does not properly...CVE-2013-7009Fix available6.8 Medium
- ffmpegThe decode_slice_header function in libavcodec/h264.c in FFmpeg before 2.1 incorrectly relies on...CVE-2013-70086.8 Medium
- ffmpegThe dirac_decode_data_unit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote...CVE-2011-39506.8 Medium
- Show moreLoading…