ffmpeg Vulnerability Advisory Catalog

Total 443 security vulnerabilities recorded for ffmpeg software and firmware.

← Back to All Vendors
CVE-2013-0876 UNKNOWN
Component: ffmpeg

Multiple integer overflows in the (1) old_codec37 and (2) old_codec47 functions in libavcodec/sanm.c in FFmpeg before 1.1.3 allow remote attackers to ...

📅 2013-11-23
CVSS 9.3 Dossier →
CVE-2013-0875 UNKNOWN
Component: ffmpeg

The ff_add_png_paeth_prediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a cra...

📅 2013-11-23
CVSS 9.3 Dossier →
CVE-2013-0874 UNKNOWN
Component: ffmpeg

The (1) doubles2str and (2) shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via ...

📅 2013-11-23
CVSS 9.3 Dossier →
CVE-2013-0873 UNKNOWN
Component: ffmpeg

The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel c...

📅 2013-11-23
CVSS 10.0 Dossier →
CVE-2013-0872 UNKNOWN
Component: ffmpeg

The swr_init function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or uns...

📅 2013-11-23
CVSS 10.0 Dossier →
CVE-2013-3675 UNKNOWN
Component: ffmpeg

The process_frame_obj function in sanm.c in libavcodec in FFmpeg before 1.2.1 does not validate width and height values, which allows remote attackers...

📅 2013-06-10
CVSS 4.3 Dossier →
CVE-2013-3674 UNKNOWN
Component: ffmpeg

The cdg_decode_frame function in cdgraphics.c in libavcodec in FFmpeg before 1.2.1 does not validate the presence of non-header data in a buffer, whic...

📅 2013-06-10
CVSS 4.3 Dossier →
CVE-2013-3673 UNKNOWN
Component: ffmpeg

The gif_decode_frame function in gifdec.c in libavcodec in FFmpeg before 1.2.1 does not properly manage the disposal methods of frames, which allows r...

📅 2013-06-10
CVSS 4.3 Dossier →
CVE-2013-3672 UNKNOWN
Component: ffmpeg

The mm_decode_inter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and ...

📅 2013-06-10
CVSS 4.3 Dossier →
CVE-2013-3671 UNKNOWN
Component: ffmpeg

The format_line function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset data during a certain category calculation, which allow...

📅 2013-06-10
CVSS 4.3 Dossier →
CVE-2013-3670 UNKNOWN
Component: ffmpeg

The rle_unpack function in vmdav.c in libavcodec in FFmpeg git 20130328 through 20130501 does not properly use the bytestream2 API, which allows remot...

📅 2013-06-10
CVSS 4.3 Dossier →
CVE-2013-2496 UNKNOWN
Component: ffmpeg

The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allow...

📅 2013-03-09
CVSS 7.5 Dossier →
CVE-2013-2495 UNKNOWN
Component: ffmpeg

The iff_read_header function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format (IFF) dat...

📅 2013-03-09
CVSS 7.5 Dossier →
CVE-2013-2277 UNKNOWN
Component: ffmpeg

The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 1.1.3 does not validate the relationship between luma depth ...

📅 2013-02-27
CVSS 7.5 Dossier →
CVE-2013-2276 UNKNOWN
Component: ffmpeg

The avcodec_decode_audio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain s...

📅 2013-02-27
CVSS 7.5 Dossier →
CVE-2011-3937 UNKNOWN
Component: ffmpeg

The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x be...

📅 2013-01-05
CVSS 10.0 Dossier →
CVE-2012-2799 UNKNOWN
Component: ffmpeg

Unspecified vulnerability in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "put bit buffer w...

📅 2012-09-10
CVSS 10.0 Dossier →
CVE-2012-2797 UNKNOWN
Component: ffmpeg

Unspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unkn...

📅 2012-09-10
CVSS 10.0 Dossier →
CVE-2012-2796 UNKNOWN
Component: ffmpeg

Unspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impac...

📅 2012-09-10
CVSS 10.0 Dossier →
CVE-2012-2795 UNKNOWN
Component: ffmpeg

Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors related to (1) size o...

📅 2012-09-10
CVSS 10.0 Dossier →
CVE-2012-2792 UNKNOWN
Component: ffmpeg

Unspecified vulnerability in the decode_init function in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, rela...

📅 2012-09-10
CVSS 10.0 Dossier →
CVE-2012-2791 UNKNOWN
Component: ffmpeg

Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcod...

📅 2012-09-10
CVSS 10.0 Dossier →
CVE-2012-2785 UNKNOWN
Component: ffmpeg

Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors, related to (1) "some...

📅 2012-09-10
CVSS 10.0 Dossier →
CVE-2012-2783 UNKNOWN
Component: ffmpeg

Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and atta...

📅 2012-09-10
CVSS 10.0 Dossier →
Page 16 of 19 (443 Total Records)