Ffmpeg
Page 3 of 4 — Ffmpeg CVEs from a corpus of 321, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9721 | Medium | 6.5 | 2019-03-12 | A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle_o… |
CVE-2019-9718 | Medium | 6.5 | 2019-03-12 | In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff_html… |
CVE-2019-1000016 | Medium | 6.5 | 2019-02-04 | FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbs_av1.c that can result in Denial of service. This atta… |
CVE-2018-15822 | High | 7.5 | 2018-08-23 | The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, leading to an assertion failure. |
CVE-2018-1999015 | Medium | 6.5 | 2018-07-23 | FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASF_F format demuxer that can result in heap memor… |
CVE-2018-1999014 | Medium | 6.5 | 2018-07-23 | FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS. This… |
CVE-2018-1999013 | Medium | 6.5 | 2018-07-23 | FFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free vulnerability in the realmedia demuxer that can result in vulnerability… |
CVE-2018-1999012 | Medium | 6.5 | 2018-07-23 | FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulner… |
CVE-2018-1999011 | High | 8.8 | 2018-07-23 | FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asf_o format demuxer that can result in heap-buffer-o… |
CVE-2018-1999010 | Critical | 9.8 | 2018-07-23 | FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in atta… |
CVE-2018-14395 | Medium | 6.5 | 2018-07-19 | libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user cra… |
CVE-2018-14394 | Medium | 6.5 | 2018-07-19 | libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user craf… |
CVE-2018-13305 | High | 8.1 | 2018-07-05 | In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger a… |
CVE-2018-13304 | Medium | 6.5 | 2018-07-05 | In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assert… |
CVE-2018-13303 | Medium | 6.5 | 2018-07-05 | In FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the avpriv_ac3_parse_header function in libavcodec/ac3_parser.c may trigger a NUL… |
CVE-2018-13302 | High | 8.8 | 2018-07-05 | In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 functio… |
CVE-2018-13301 | Medium | 6.5 | 2018-07-05 | In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may tri… |
CVE-2018-13300 | High | 8.1 | 2018-07-05 | In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/moven… |
CVE-2018-12460 | Medium | 6.5 | 2018-06-15 | libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, lea… |
CVE-2018-12459 | Medium | 6.5 | 2018-06-15 | An inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion viola… |
CVE-2018-12458 | Medium | 6.5 | 2018-06-15 | An improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while c… |
CVE-2018-7751 | Medium | 6.5 | 2018-04-24 | The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML… |
CVE-2018-10001 | Medium | 6.5 | 2018-04-11 | The decode_init function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via an AVI… |
CVE-2018-9841 | High | 8.8 | 2018-04-07 | The export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out-of-array access) or possibl… |
CVE-2018-7557 | Medium | 6.5 | 2018-02-28 | The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service (Out of array read) via an… |
CVE-2018-6912 | Medium | 6.5 | 2018-02-12 | The decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out of array read) via a cra… |
CVE-2012-5360 | High | 8.8 | 2018-02-08 | Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file. |
CVE-2012-5359 | High | 8.8 | 2018-02-08 | Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file. |
CVE-2018-6621 | Medium | 6.5 | 2018-02-05 | The decode_frame function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service (out of array read) via a craft… |
CVE-2018-6392 | Medium | 6.5 | 2018-01-29 | The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service (out-of-array access) via… |
CVE-2015-1208 | Medium | 5.5 | 2018-01-09 | Integer underflow in the mov_read_default function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from hea… |
CVE-2017-1000460 | Medium | 6.5 | 2018-01-03 | In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of init_get_bits is ignored and get_ue_gol… |
CVE-2017-9608 | Medium | 6.5 | 2017-12-27 | The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted… |
CVE-2017-17555 | Medium | 6.5 | 2017-12-12 | The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows rem… |
CVE-2017-17081 | Medium | 6.5 | 2017-11-30 | The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cau… |
CVE-2017-16840 | Critical | 9.8 | 2017-11-21 | The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because of incorrect buffer… |
CVE-2017-15672 | High | 8.8 | 2017-11-06 | The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted… |
CVE-2017-15186 | Medium | 6.5 | 2017-10-24 | Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file. |
CVE-2017-14767 | High | 8.8 | 2017-09-27 | The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-parameter-sets values, which allows remote a… |
CVE-2017-14225 | High | 8.8 | 2017-09-09 | The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do… |
CVE-2017-14223 | Medium | 6.5 | 2017-09-09 | In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a… |
CVE-2017-14222 | Medium | 6.5 | 2017-09-09 | In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafte… |
CVE-2017-14171 | Medium | 6.5 | 2017-09-07 | In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. W… |
CVE-2017-14170 | Medium | 6.5 | 2017-09-07 | In libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause huge CPU consumptio… |
CVE-2017-14169 | High | 8.8 | 2017-09-07 | In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, an integer signedness error might occur when a crafted file, which claims… |
CVE-2017-14059 | Medium | 6.5 | 2017-08-31 | In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a… |
CVE-2017-14058 | Medium | 6.5 | 2017-08-31 | In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers… |
CVE-2017-14057 | Medium | 6.5 | 2017-08-31 | In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, whi… |
CVE-2017-14056 | Medium | 6.5 | 2017-08-31 | In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a… |
CVE-2017-14055 | Medium | 6.5 | 2017-08-31 | In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a… |
CVE-2017-14054 | Medium | 6.5 | 2017-08-31 | In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted I… |
CVE-2013-0870 | Critical | 9.8 | 2017-08-28 | The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check. |
CVE-2012-2805 | High | 7.5 | 2017-08-28 | Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service. |
CVE-2012-2781 | Critical | 9.8 | 2017-08-09 | Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-… |
CVE-2012-2780 | Critical | 9.8 | 2017-08-09 | Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-… |
CVE-2012-2778 | Critical | 9.8 | 2017-08-09 | Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-… |
CVE-2012-2773 | Critical | 9.8 | 2017-08-09 | Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2778, CVE-2012-… |
CVE-2012-2771 | Critical | 9.8 | 2017-08-09 | Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2773, CVE-2012-2778, CVE-2012-… |
CVE-2017-11719 | High | 7.8 | 2017-07-28 | The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access… |
CVE-2017-11665 | High | 7.5 | 2017-07-27 | The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segmentation Violation an… |
CVE-2017-11399 | High | 7.8 | 2017-07-17 | Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-… |
CVE-2017-9996 | High | 7.8 | 2017-06-28 | The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before… |
CVE-2017-9995 | High | 7.8 | 2017-06-28 | libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service (heap… |
CVE-2017-9994 | High | 7.8 | 2017-06-28 | libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pix_fmt is s… |
CVE-2017-9993 | High | 7.5 | 2017-06-28 | FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensio… |
CVE-2017-9992 | High | 8.8 | 2017-06-28 | Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5… |
CVE-2017-9991 | High | 7.8 | 2017-06-28 | Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x befor… |
CVE-2017-9990 | High | 8.8 | 2017-06-28 | Stack-based buffer overflow in the color_string_to_rgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers to cause a denial of… |
CVE-2017-7866 | Critical | 9.8 | 2017-04-14 | FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c. |
CVE-2017-7865 | Critical | 9.8 | 2017-04-14 | FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcode… |
CVE-2017-7863 | Critical | 9.8 | 2017-04-14 | FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c. |
CVE-2017-7862 | Critical | 9.8 | 2017-04-14 | FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame function in libavcodec/pictordec.c. |
CVE-2017-7859 | Critical | 9.8 | 2017-04-14 | FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ff_h264_slice_context_init function in libavcodec/h26… |
CVE-2012-5361 | High | 7.8 | 2017-03-20 | Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file. |
CVE-2016-10192 | Critical | 9.8 | 2017-02-09 | Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to exe… |
CVE-2016-10191 | Critical | 9.8 | 2017-02-09 | Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attac… |
CVE-2016-10190 | Critical | 9.8 | 2017-02-09 | Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web serv… |
CVE-2016-6920 | High | 7.5 | 2017-01-23 | Heap-based buffer overflow in the decode_block function in libavcodec/exr.c in FFmpeg before 3.1.3 allows remote attackers to cause a denial of service (applic… |
CVE-2016-6164 | Critical | 9.8 | 2017-01-23 | Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers… |
CVE-2016-9561 | Medium | 5.5 | 2016-12-23 | The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service (allocation of huge memo… |
CVE-2016-8595 | Medium | 5.5 | 2016-12-23 | The gsm_parse function in libavcodec/gsm_parser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service (assert fault) via a crafted AVI… |
CVE-2016-7905 | Medium | 5.5 | 2016-12-23 | The read_gab2_sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (NULL pointer used) via a crafte… |
CVE-2016-7785 | Medium | 5.5 | 2016-12-23 | The avi_read_seek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (assert fault) via a crafted AVI… |
CVE-2016-7562 | Medium | 5.5 | 2016-12-23 | The ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (buffer overflow) via a craft… |
CVE-2016-7555 | Medium | 5.5 | 2016-12-23 | The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" st… |
CVE-2016-7502 | High | 7.8 | 2016-12-23 | The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavs_decode. |
CVE-2016-7450 | High | 7.8 | 2016-12-23 | The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file. |
CVE-2016-7122 | Medium | 5.5 | 2016-12-23 | The avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg'… |
CVE-2016-6881 | Medium | 5.5 | 2016-12-23 | The zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF f… |
CVE-2016-6671 | High | 7.8 | 2016-12-23 | The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service (memory corruption) or execute arbit… |
CVE-2016-2839 | Medium | 6.5 | 2016-08-05 | Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo _cairo_surface_get_extents calls that do not properly interact with libav head… |
CVE-2016-3062 | High | 8.8 | 2016-06-16 | The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corrup… |
CVE-2016-2330 | High | 8.8 | 2016-02-12 | libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service (out-of-bounds ar… |
CVE-2016-2329 | High | 8.8 | 2016-02-12 | libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attacker… |
CVE-2016-2328 | High | 8.8 | 2016-02-12 | libswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denial of service (out-o… |
CVE-2016-2327 | High | 8.8 | 2016-02-12 | libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations, which allows remote attackers to cause a denial of service (o… |
CVE-2016-2326 | High | 8.8 | 2016-02-12 | Integer overflow in the asf_write_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5 allows remote attackers to cause a denial of service or possib… |
CVE-2016-2213 | Medium | 6.5 | 2016-02-03 | The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service (out-of-bounds array… |
CVE-2016-1898 | Medium | 5.5 | 2016-01-15 | FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8… |
CVE-2016-1897 | Medium | 5.5 | 2016-01-15 | FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 f… |