Ffmpeg
Page 2 of 4 — Ffmpeg CVEs from a corpus of 321, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-125023 | Medium | 5.3 | 2022-06-19 | A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function truemotion1_decode_header of the c… |
CVE-2014-125022 | Medium | 5.3 | 2022-06-19 | A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shorten_decode_frame of the component Bitstream Buffer… |
CVE-2014-125021 | Medium | 5.3 | 2022-06-19 | A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function cmv_process_header. The manipulation leads to memory cor… |
CVE-2014-125020 | High | 7.3 | 2022-06-19 | A vulnerability has been found in FFmpeg 2.0 and classified as critical. This vulnerability affects the function decode_update_thread_context. The manipulation… |
CVE-2014-125019 | Medium | 5.3 | 2022-06-19 | A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_nal_unit of the component Slice Segment Handler… |
CVE-2014-125018 | Medium | 5.3 | 2022-06-19 | A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function decode_slice_header. The manipulatio… |
CVE-2014-125017 | High | 7.3 | 2022-06-18 | A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory co… |
CVE-2014-125016 | Medium | 5.3 | 2022-06-18 | A vulnerability was found in FFmpeg 2.0. It has been rated as problematic. This issue affects the function ff_init_buffer_info of the file utils.c. The manipul… |
CVE-2014-125015 | High | 7.3 | 2022-06-18 | A vulnerability classified as critical has been found in FFmpeg 2.0. Affected is the function read_var_block_data. The manipulation leads to memory corruption… |
CVE-2014-125014 | Medium | 5.3 | 2022-06-18 | A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decod… |
CVE-2014-125013 | Medium | 5.3 | 2022-06-18 | A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrle_decode_frame of the file libavcodec/msrle.c. The m… |
CVE-2014-125012 | Medium | 5.3 | 2022-06-18 | A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the file libavcodec/dxtroy.c. The manipulati… |
CVE-2014-125011 | Medium | 5.3 | 2022-06-18 | A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decode_frame of the file libavcode… |
CVE-2014-125010 | Medium | 5.3 | 2022-06-18 | A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function decode_slice_header of the file libavcodec/h64.c… |
CVE-2014-125009 | Medium | 5.3 | 2022-06-18 | A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function add_yblock of the file libavcodec/snow.h. The manipulation le… |
CVE-2014-125008 | Medium | 5.3 | 2022-06-18 | A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbis_header of the file libavformat/oggparsevorbis.c. The ma… |
CVE-2014-125007 | Medium | 5.3 | 2022-06-18 | A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is the function intra_pred of the file libavcodec/hevcpred_te… |
CVE-2014-125006 | Medium | 5.3 | 2022-06-18 | A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function output_frame of the file libavcodec/… |
CVE-2014-125005 | Medium | 5.3 | 2022-06-18 | A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_vol_header of the file libavcodec/mpeg4videodec… |
CVE-2014-125004 | Medium | 5.3 | 2022-06-18 | A vulnerability has been found in FFmpeg 2.0 and classified as problematic. This vulnerability affects the function decode_hextile of the file libavcodec/vmnc… |
CVE-2014-125003 | Medium | 5.3 | 2022-06-18 | A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function get_siz of the file libavcodec/jpeg2000dec.c. The manipu… |
CVE-2014-125002 | Medium | 5.3 | 2022-06-18 | A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function dnxhd_init_rc of the file libavcodec/dnxhdenc.c. The m… |
CVE-2022-1475 | Medium | 5.5 | 2022-05-02 | An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a spe… |
CVE-2020-23906 | Medium | 5.5 | 2021-11-10 | FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity. |
CVE-2021-38094 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other… |
CVE-2021-38093 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or othe… |
CVE-2021-38092 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or oth… |
CVE-2021-38091 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or oth… |
CVE-2021-38090 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or o… |
CVE-2020-20902 | Medium | 6.5 | 2021-09-20 | A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of ps… |
CVE-2020-20898 | High | 8.8 | 2021-09-20 | Integer Overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or o… |
CVE-2020-20896 | High | 8.8 | 2021-09-20 | An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecif… |
CVE-2020-20892 | High | 8.8 | 2021-09-20 | An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other uns… |
CVE-2020-20891 | High | 8.8 | 2021-09-20 | Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspec… |
CVE-2021-38171 | Critical | 9.8 | 2021-08-21 | adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a necessary step because the second argume… |
CVE-2021-38291 | High | 7.5 | 2021-08-12 | FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion failure at src/libavutil/mathematics.c. |
CVE-2020-21697 | Medium | 6.5 | 2021-08-10 | A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi… |
CVE-2020-21688 | High | 8.8 | 2021-08-10 | A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code. |
CVE-2021-3566 | Medium | 5.5 | 2021-08-05 | Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an i… |
CVE-2021-38114 | Medium | 5.5 | 2021-08-04 | libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868. |
CVE-2021-33815 | High | 8.8 | 2021-06-03 | dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly checked. |
CVE-2020-22056 | Medium | 6.5 | 2021-06-02 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c. |
CVE-2020-22054 | Medium | 6.5 | 2021-06-02 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c. |
CVE-2020-22051 | Medium | 6.5 | 2021-06-02 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c. |
CVE-2020-22049 | Medium | 6.5 | 2021-06-02 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c. |
CVE-2020-22048 | Medium | 6.5 | 2021-06-02 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c. |
CVE-2020-22046 | Medium | 6.5 | 2021-06-02 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c. |
CVE-2020-22044 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c. |
CVE-2020-22043 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c. |
CVE-2020-22042 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graph… |
CVE-2020-22041 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc. |
CVE-2020-22040 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c. |
CVE-2020-22039 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function. |
CVE-2020-22038 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c. |
CVE-2020-22037 | Medium | 6.5 | 2021-06-01 | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c. |
CVE-2020-22036 | High | 8.8 | 2021-06-01 | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might lead to memory corruption and other pote… |
CVE-2020-22035 | High | 8.8 | 2021-06-01 | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might lead to memory corruption and other pote… |
CVE-2020-22034 | High | 8.8 | 2021-05-27 | A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory corruption and other potential consequen… |
CVE-2020-22033 | Medium | 6.5 | 2021-05-27 | A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, which could let a remote malicious user caus… |
CVE-2020-22032 | High | 8.8 | 2021-05-27 | A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which might lead to memory corruption and other p… |
CVE-2020-22027 | High | 8.8 | 2021-05-27 | A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might lead to memory corruption and other poten… |
CVE-2020-22025 | High | 8.8 | 2021-05-27 | A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to memory corruption and other potential co… |
CVE-2020-22023 | High | 8.8 | 2021-05-27 | A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, which might lead to memory corruption and o… |
CVE-2020-22022 | High | 8.8 | 2021-05-27 | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which might lead to memory corruption and other… |
CVE-2020-22017 | High | 8.8 | 2021-05-27 | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and othe… |
CVE-2020-22016 | High | 8.8 | 2021-05-27 | A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might lead to memory corruption and other pote… |
CVE-2020-22031 | High | 8.8 | 2021-05-27 | A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, which might lead to memory corruption and o… |
CVE-2020-22030 | High | 8.8 | 2021-05-27 | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, which might lead to memory corruption and… |
CVE-2020-22029 | High | 8.8 | 2021-05-27 | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, whic… |
CVE-2020-22028 | Medium | 6.5 | 2021-05-26 | Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service. |
CVE-2020-22026 | Medium | 6.5 | 2021-05-26 | Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a De… |
CVE-2020-22024 | Medium | 6.5 | 2021-05-26 | Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of… |
CVE-2020-22021 | Medium | 6.5 | 2021-05-26 | Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Servi… |
CVE-2020-22020 | Medium | 6.5 | 2021-05-26 | Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Deni… |
CVE-2020-22019 | Medium | 6.5 | 2021-05-26 | Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Se… |
CVE-2020-22015 | High | 8.8 | 2021-05-26 | Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user ob… |
CVE-2020-24020 | High | 8.8 | 2021-05-26 | Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c due to a call to memcpy without length… |
CVE-2020-20453 | Medium | 6.5 | 2021-05-25 | FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service |
CVE-2020-20451 | High | 7.5 | 2021-05-25 | Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c. |
CVE-2020-20450 | High | 7.5 | 2021-05-25 | FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service. |
CVE-2020-20448 | Medium | 6.5 | 2021-05-25 | FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service. |
CVE-2020-20446 | Medium | 6.5 | 2021-05-25 | FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause a Denial of Service. |
CVE-2020-20445 | Medium | 6.5 | 2021-05-25 | FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service. |
CVE-2020-21041 | High | 7.5 | 2021-05-24 | Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of… |
CVE-2021-30123 | High | 8.8 | 2021-04-07 | FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution. |
CVE-2020-24995 | High | 7.8 | 2021-03-30 | Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local). |
CVE-2020-35965 | High | 7.5 | 2021-01-04 | decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations. |
CVE-2020-35964 | Medium | 6.5 | 2021-01-03 | track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing. |
CVE-2020-14212 | High | 8.8 | 2020-06-16 | FFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.c calls ff_dnn_load_model_native and a… |
CVE-2020-13904 | Medium | 5.5 | 2020-06-07 | FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later… |
CVE-2020-12284 | Critical | 9.8 | 2020-04-28 | cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing… |
CVE-2014-4610 | High | 8.8 | 2020-01-14 | Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before… |
CVE-2019-17542 | Critical | 9.8 | 2019-10-14 | FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c. |
CVE-2019-17539 | Critical | 9.8 | 2019-10-14 | In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close… |
CVE-2019-15942 | High | 8.8 | 2019-09-05 | FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c m… |
CVE-2019-13390 | Medium | 6.5 | 2019-07-07 | In FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in libavformat/rawenc.c. |
CVE-2019-13312 | High | 8.8 | 2019-07-05 | block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read. |
CVE-2019-12730 | Critical | 9.8 | 2019-06-04 | aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitializ… |
CVE-2019-11339 | High | 8.8 | 2019-04-19 | The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service (… |
CVE-2019-11338 | High | 8.8 | 2019-04-19 | libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL p… |