ffmpeg Vulnerability Advisory Catalog

Total 443 security vulnerabilities recorded for ffmpeg software and firmware.

← Back to All Vendors
Component: ffmpeg

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file....

📅 2018-02-08
CVSS 8.8 Dossier →
Component: ffmpeg

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file....

📅 2018-02-08
CVSS 8.8 Dossier →
CVE-2018-6621 MEDIUM
Component: ffmpeg

The decode_frame function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service (out of array read) vi...

📅 2018-02-05
CVSS 6.5 Dossier →
CVE-2018-6392 MEDIUM
Component: ffmpeg

The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service (out-of-array acc...

📅 2018-01-29
CVSS 6.5 Dossier →
CVE-2015-1208 MEDIUM
Component: ffmpeg

Integer underflow in the mov_read_default function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information...

📅 2018-01-09
CVSS 5.5 Dossier →
CVE-2017-9608 MEDIUM
Component: ffmpeg

The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a...

📅 2017-12-27
CVSS 6.5 Dossier →
Component: ffmpeg

The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attacke...

📅 2017-11-30
CVSS 6.5 Dossier →
CVE-2017-16840 CRITICAL
Component: ffmpeg

The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because of incorrec...

📅 2017-11-21
CVSS 9.8 Dossier →
Component: ffmpeg

The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a...

📅 2017-11-06
CVSS 8.8 Dossier →
Component: ffmpeg

Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file....

📅 2017-10-24
CVSS 6.5 Dossier →
Component: ffmpeg

The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-parameter-sets values, which allows...

📅 2017-09-27
CVSS 8.8 Dossier →
Component: ffmpeg

The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but ca...

📅 2017-09-09
CVSS 8.8 Dossier →
Component: ffmpeg

In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumptio...

📅 2017-09-09
CVSS 6.5 Dossier →
Component: ffmpeg

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When...

📅 2017-09-09
CVSS 6.5 Dossier →
Component: ffmpeg

In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consu...

📅 2017-09-07
CVSS 6.5 Dossier →
Component: ffmpeg

In libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause huge CPU c...

📅 2017-09-07
CVSS 6.5 Dossier →
Component: ffmpeg

In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, an integer signedness error might occur when a crafted file, whic...

📅 2017-09-07
CVSS 8.8 Dossier →
Component: ffmpeg

In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which ...

📅 2017-08-31
CVSS 6.5 Dossier →
Component: ffmpeg

In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote a...

📅 2017-08-31
CVSS 6.5 Dossier →
Component: ffmpeg

In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF ...

📅 2017-08-31
CVSS 6.5 Dossier →
Component: ffmpeg

In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption...

📅 2017-08-31
CVSS 6.5 Dossier →
Component: ffmpeg

In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumptio...

📅 2017-08-31
CVSS 6.5 Dossier →
Component: ffmpeg

In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a ...

📅 2017-08-31
CVSS 6.5 Dossier →
CVE-2013-0870 CRITICAL
Component: ffmpeg

The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check....

📅 2017-08-28
CVSS 9.8 Dossier →
Page 9 of 19 (443 Total Records)