Skip to contentFfmpeg vulnerabilities
Newest
- ffmpegBuffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter...CVE-2020-22024Fix available6.5 Medium
- ffmpeg, debian linux +1 moreBuffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c,...CVE-2020-22021Fix available6.5 Medium
- ffmpeg, debian linux +1 moreBuffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c...CVE-2020-22019Fix available6.5 Medium
- ffmpeg, debian linux +1 moreBuffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter...CVE-2020-22020Fix available6.5 Medium
- ffmpeg, debian linux +1 moreBuffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in...CVE-2020-22015Fix available8.8 High
- ffmpegBuffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn...CVE-2020-24020Fix available8.8 High
- ffmpeg, debian linux +1 moreFFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote...CVE-2020-20453Fix available6.5 Medium
- ffmpeg, debian linux +1 moreDenial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.CVE-2020-20451Fix available7.5 High
- ffmpeg, debian linux +1 moreFFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c,...CVE-2020-20450Fix available7.5 High
- ffmpeg, debian linux +1 moreFFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote...CVE-2020-20446Fix available6.5 Medium
- ffmpeg, debian linux +1 moreFFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote...CVE-2020-20445Fix available6.5 Medium
- ffmpeg, debian linux +1 moreBuffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc...CVE-2020-21041Fix available7.5 High
- ffmpegFFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that...CVE-2021-30123Fix available8.8 High
- ffmpegBuffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1...CVE-2020-249957.8 High
- ffmpeg, debian linux +1 moredecode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in...CVE-2020-35965Fix available7.5 High
- ffmpegtrack_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of...CVE-2020-35964Fix available6.5 Medium
- ffmpegA CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter...CVE-2020-20902Fix available6.5 Medium
- ffmpegFFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a...CVE-2020-20448Fix available6.5 Medium
- ffmpegFFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c...CVE-2020-14212Fix available8.8 High
- ffmpeg, canonical ubuntu linux, debian linux +2 moreFFmpeg 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because...CVE-2020-13904Fix available5.5 Medium
- ffmpeg, canonical ubuntu linux, debian linux +2 morecbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.2.2 has a heap-based buffer overflow...CVE-2020-12284Fix available9.8 Critical
- ffmpeg, canonical ubuntu linux, debian linux +2 moreIn FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and...CVE-2019-17539Fix available9.8 Critical
- ffmpeg, canonical ubuntu linux, debian linux +2 moreFFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array...CVE-2019-17542Fix available9.8 Critical
- ffmpegFFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in...CVE-2019-15942Fix available8.8 High
- ffmpegIn FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in libavformat/rawenc.c. This...CVE-2019-13390Fix available6.5 Medium
- ffmpegblock_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read.CVE-2019-13312Fix available8.8 High
- ffmpegaa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 does not check for sscanf failure...CVE-2019-12730Fix available9.8 Critical
- ffmpegThe studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1...CVE-2019-11339Fix available8.8 High
- ffmpeg, canonical ubuntu linux, debian linux +1 more +3 morelibavcodec/hevcdec.c in FFmpeg 4.1.2 mishandles detection of duplicate first slices, which allows...CVE-2019-11338Fix available8.8 High
- ffmpeg, canonical ubuntu linux +1 moreA denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU...CVE-2019-9721Fix available6.5 Medium
- ffmpeg, canonical ubuntu linux, debian linux +2 moreIn FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the...CVE-2019-9718Fix available6.5 Medium
- ffmpegFFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in...CVE-2019-1000016Fix available6.5 Medium
- ffmpeg, canonical ubuntu linux, debian linux +2 moreThe flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an...CVE-2018-15822Fix available7.5 High
- ffmpegFFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read...CVE-2018-1999015Fix available6.5 Medium
- ffmpegFFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access...CVE-2018-1999014Fix available6.5 Medium
- ffmpegFFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow...CVE-2018-1999011Fix available8.8 High
- ffmpeg, debian linux +1 morelibavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service ...CVE-2018-14395Fix available6.5 Medium
- ffmpegFFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free...CVE-2018-1999013Fix available6.5 Medium
- ffmpegFFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop...CVE-2018-1999012Fix available6.5 Medium
- ffmpeg, debian linux +1 moreFFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array...CVE-2018-1999010Fix available9.8 Critical
- ffmpeglibavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service ...CVE-2018-14394Fix available6.5 Medium
- ffmpegIn FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the...CVE-2018-133058.1 High
- ffmpegIn libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context...CVE-2018-13304Fix available6.5 Medium
- ffmpegIn FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the...CVE-2018-13303Fix available6.5 Medium
- ffmpeg, debian linux +1 moreIn FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that...CVE-2018-13302Fix available8.8 High
- ffmpegIn FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the...CVE-2018-13301Fix available6.5 Medium
- ffmpeg, debian linux +1 moreIn FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the...CVE-2018-13300Fix available8.1 High
- ffmpeglibavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is...CVE-2018-124606.5 Medium
- ffmpegAn inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function in...CVE-2018-12459Fix available6.5 Medium
- ffmpeg, debian linux +1 moreAn improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in...CVE-2018-12458Fix available6.5 Medium
- Show moreLoading…