Skip to contentFfmpeg vulnerabilities
Newest
- ffmpegFFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow...CVE-2017-7862Fix available9.8 Critical
- ffmpegFFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow...CVE-2017-78599.8 Critical
- ffmpegLibavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted...CVE-2012-5361Fix available7.8 High
- ffmpegHeap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x...CVE-2016-10192Fix available9.8 Critical
- ffmpegHeap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5,...CVE-2016-10191Public exploitFix available9.8 Critical
- ffmpegHeap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1...CVE-2016-10190Public exploitFix available9.8 Critical
- ffmpegHeap-based buffer overflow in the decode_block function in libavcodec/exr.c in FFmpeg before 3.1...CVE-2016-6920Fix available7.5 High
- ffmpegInteger overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0...CVE-2016-6164Fix available9.8 Critical
- ffmpegThe che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote...CVE-2016-9561Fix available5.5 Medium
- ffmpegThe gsm_parse function in libavcodec/gsm_parser.c in FFmpeg before 3.1.5 allows remote attackers...CVE-2016-8595Fix available5.5 Medium
- ffmpegThe ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to...CVE-2016-7450Fix available7.8 High
- ffmpegThe avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to...CVE-2016-7122Fix available5.5 Medium
- ffmpegThe zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers...CVE-2016-6881Fix available5.5 Medium
- ffmpegThe raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to...CVE-2016-6671Fix available7.8 High
- ffmpegThe read_gab2_sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers...CVE-2016-7905Fix available5.5 Medium
- ffmpegThe avi_read_seek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers...CVE-2016-7785Fix available5.5 Medium
- ffmpegThe ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote...CVE-2016-7562Fix available5.5 Medium
- ffmpegThe avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to...CVE-2016-7555Fix available5.5 Medium
- ffmpegThe cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to...CVE-2016-7502Fix available7.8 High
- ffmpeg, libav, debian linux +1 more +3 moreThe mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11...CVE-2016-3062Fix available8.8 High
- ffmpeg, opensuse leap +1 morelibavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr...CVE-2016-2329Fix available8.8 High
- ffmpeglibswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values,...CVE-2016-2328Fix available8.8 High
- ffmpeglibavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations,...CVE-2016-2327Fix available8.8 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows...CVE-2016-2330Fix available8.8 High
- ffmpeg, canonical ubuntu linux, debian linux +2 moreInteger overflow in the asf_write_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5...CVE-2016-2326Fix available8.8 High
- ffmpegThe jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows...CVE-2016-2213Fix available6.5 Medium
- ffmpeg, canonical ubuntu linux, opensuse leap +2 moreFFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by...CVE-2016-1898Fix availableEPSS 13.0%5.5 Medium
- ffmpeg, canonical ubuntu linux, opensuse leap +2 moreFFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by...CVE-2016-1897Fix availableEPSS 14.6%5.5 Medium
- ffmpegThe ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and...CVE-2015-8663Fix available8.3 High
- ffmpegThe ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate...CVE-2015-8662Fix available7.3 High
- ffmpegThe h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not...CVE-2015-8661Fix available8.3 High
- ffmpegThe jpeg2000_read_main_headers function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x...CVE-2015-8363Fix available6.8 Medium
- ffmpeg, canonical ubuntu linux +1 moreThe smka_decode_frame function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3...CVE-2015-8365Fix available6.8 Medium
- ffmpeg, canonical ubuntu linux +1 moreInteger overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2...CVE-2015-8364Fix available6.8 Medium
- ffmpegThe init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce...CVE-2015-8219Fix available7.5 High
- ffmpegThe decode_uncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not...CVE-2015-8218Fix available6.8 Medium
- ffmpegThe ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate...CVE-2015-8217Fix available7.5 High
- ffmpegThe ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain...CVE-2015-8216Fix available7.5 High
- ffmpeg, google chrome +1 moreThe update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google...CVE-2015-6761Fix available6.8 Medium
- ffmpegThe ff_frame_thread_init function in libavcodec/pthread_frame.c in FFmpeg before 2.7.2 mishandles...CVE-2015-6825Fix available7.5 High
- ffmpegThe allocate_buffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize...CVE-2015-6823Fix available7.5 High
- ffmpegThe destroy_buffers function in libavcodec/sanm.c in FFmpeg before 2.7.2 does not properly...CVE-2015-6822Fix available7.5 High
- ffmpegThe ff_mpv_common_init function in libavcodec/mpegvideo.c in FFmpeg before 2.7.2 does not...CVE-2015-6821Fix available7.5 High
- ffmpegMultiple integer underflows in the ff_mjpeg_decode_frame function in libavcodec/mjpegdec.c in...CVE-2015-6819Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not...CVE-2015-6826Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe sws_init_context function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize...CVE-2015-6824Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe ff_sbr_apply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a...CVE-2015-6820Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce...CVE-2015-6818Fix available7.5 High
- ffmpeg, libav, canonical ubuntu linux +2 moreThe msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg...CVE-2015-3395Fix available6.8 Medium
- ffmpeg, canonical ubuntu linux +1 moreThe ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not...CVE-2015-1872Fix available6.8 Medium
- Show moreLoading…