ffmpeg Vulnerability Advisory Catalog

Total 443 security vulnerabilities recorded for ffmpeg software and firmware.

← Back to All Vendors
Component: ffmpeg

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the config_eq_output function in th...

📅 2024-04-19
CVSS 8.0 Dossier →
Component: ffmpeg

FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c. This vulnerability allows a...

📅 2024-04-17
CVSS 5.3 Dossier →
Component: ffmpeg

FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw_block_rectangle function of libavfilter/vf_codecview.c....

📅 2024-04-17
CVSS 7.8 Dossier →
CVE-2024-31581 CRITICAL
Component: ffmpeg

FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. This vulne...

📅 2024-04-17
CVSS 9.8 Dossier →
Component: ffmpeg

FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function....

📅 2024-04-17
CVSS 7.5 Dossier →
Component: ffmpeg

Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute arbitrary code and cause a denial of service (D...

📅 2024-04-12
CVSS 8.0 Dossier →
Component: ffmpeg

Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module....

📅 2024-01-27
CVSS 7.5 Dossier →
CVE-2024-22862 CRITICAL
Component: ffmpeg

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser....

📅 2024-01-27
CVSS 9.8 Dossier →
CVE-2024-22860 CRITICAL
Component: ffmpeg

Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in t...

📅 2024-01-27
CVSS 9.8 Dossier →
Component: ffmpeg

Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-ar...

📅 2023-11-16
CVSS 7.8 Dossier →
Component: ffmpeg

FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() function....

📅 2023-10-27
CVSS 5.5 Dossier →
Component: ffmpeg

Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of...

📅 2023-08-11
CVSS 5.5 Dossier →
Component: ffmpeg

An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (DoS)....

📅 2023-08-11
CVSS 7.5 Dossier →
Component: ffmpeg

libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attac...

📅 2023-03-29
CVSS 8.1 Dossier →
CVE-2022-3965 MEDIUM
Component: ffmpeg

A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavcodec/smcenc...

📅 2022-11-13
CVSS 4.3 Dossier →
CVE-2022-3964 MEDIUM
Component: ffmpeg

A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component Qui...

📅 2022-11-13
CVSS 4.3 Dossier →
CVE-2022-2566 CRITICAL
Component: ffmpeg

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries i...

📅 2022-09-23
CVSS 9.0 Dossier →
Component: ffmpeg

A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function decode_pulses. The manipulation leads to memory corr...

📅 2022-06-19
CVSS 5.3 Dossier →
Component: ffmpeg

A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function lag_decode_frame. The manipulation lead...

📅 2022-06-19
CVSS 7.3 Dossier →
Component: ffmpeg

A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function truemotion1_decode_header...

📅 2022-06-19
CVSS 5.3 Dossier →
Component: ffmpeg

A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shorten_decode_frame of the component Bitstre...

📅 2022-06-19
CVSS 5.3 Dossier →
Component: ffmpeg

A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function cmv_process_header. The manipulation leads to m...

📅 2022-06-19
CVSS 5.3 Dossier →
Component: ffmpeg

A vulnerability has been found in FFmpeg 2.0 and classified as critical. This vulnerability affects the function decode_update_thread_context. The man...

📅 2022-06-19
CVSS 7.3 Dossier →
Component: ffmpeg

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_nal_unit of the component Slice Segmen...

📅 2022-06-19
CVSS 5.3 Dossier →
Page 3 of 19 (443 Total Records)