ffmpeg Vulnerability Advisory Catalog

Total 443 security vulnerabilities recorded for ffmpeg software and firmware.

← Back to All Vendors
CVE-2024-35366 CRITICAL
Component: ffmpeg

FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing cert...

📅 2024-11-29
CVSS 9.1 Dossier →
Component: ffmpeg

An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via...

📅 2024-11-29
CVSS 6.5 Dossier →
Component: ffmpeg

FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as...

📅 2024-11-29
CVSS 5.9 Dossier →
Component: ffmpeg

FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denia...

📅 2024-11-29
CVSS 6.2 Dossier →
Component: ffmpeg

FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder....

📅 2024-11-29
CVSS 6.2 Dossier →
Component: ffmpeg

FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block typ...

📅 2024-11-29
CVSS 5.3 Dossier →
Component: ffmpeg

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation ...

📅 2024-11-29
CVSS 5.5 Dossier →
CVE-2024-7272 MEDIUM
Component: ffmpeg

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill_audiodata of the file /libswresampl...

📅 2024-08-12
CVSS 6.3 Dossier →
CVE-2024-7055 MEDIUM
Component: ffmpeg

A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavc...

📅 2024-08-06
CVSS 6.3 Dossier →
Component: ffmpeg

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7...

📅 2024-07-01
CVSS 7.8 Dossier →
Component: ffmpeg

FFmpeg 7.0 contains a heap-buffer-overflow at libavfilter/vf_tiltandshift.c:189:5 in copy_column....

📅 2024-07-01
CVSS 8.4 Dossier →
Component: ffmpeg

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevc_frame_end....

📅 2024-07-01
CVSS 6.6 Dossier →
Component: ffmpeg

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/af_stereowiden.c:1...

📅 2024-04-26
CVSS 7.8 Dossier →
Component: ffmpeg

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via a floating point exception (FPE) e...

📅 2024-04-19
CVSS 7.8 Dossier →
Component: ffmpeg

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avf_showwaves.c:72...

📅 2024-04-19
CVSS 6.7 Dossier →
Component: ffmpeg

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/f_reverse.c:269:26...

📅 2024-04-19
CVSS 3.6 Dossier →
Component: ffmpeg

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avf_showspectrum.c...

📅 2024-04-19
CVSS 8.0 Dossier →
Component: ffmpeg

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavutil/imgutils.c:353:9 in ...

📅 2024-04-19
CVSS 7.8 Dossier →
Component: ffmpeg

Buffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavcodec/jpegxl_parser.c in ...

📅 2024-04-19
CVSS 7.8 Dossier →
Component: ffmpeg

FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff_gradfun_blur_line_movdqa_sse2, as demonstrated by a call to the set_encoder_id function in...

📅 2024-04-19
CVSS 7.8 Dossier →
Component: ffmpeg

FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow via the ff_gaussian_blur_8 function in libavfilter/edge_template.c:116:5 component....

📅 2024-04-19
CVSS 8.0 Dossier →
Component: ffmpeg

FFmpeg v.n6.1-3-g466799d4f5 allows memory consumption when using the colorcorrect filter, in the av_malloc function in libavutil/mem.c:105:9 component...

📅 2024-04-19
CVSS 7.8 Dossier →
Component: ffmpeg

FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the av_samples_set_silence function in thelibavutil/s...

📅 2024-04-19
CVSS 4.0 Dossier →
Component: ffmpeg

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c functio...

📅 2024-04-19
CVSS 8.8 Dossier →
Page 2 of 19 (443 Total Records)