Browse CVEs

MEDIUM 6.5 CVE-2020-22056 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c. Ffmpeg No fix yet Fix from $1,6002021-06-02 MEDIUM 6.5 CVE-2020-22051 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c. Ffmpeg No fix yet Fix from $1,6002021-06-02 MEDIUM 6.5 CVE-2020-22038 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c. Ffmpeg No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22039 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function. Ffmpeg No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22040 A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c. Ffmpeg No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22043 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c. Ffmpeg No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22024 Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause … Ffmpeg No fix yet Fix from $1,6002021-05-26 HIGH 8.8 CVE-2020-24020 Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c due to a call to memcpy with… Ffmpeg Mitigation only Fix from $1,9502021-05-26 MEDIUM 6.5 CVE-2020-20448 FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service. Ffmpeg Mitigation only Fix from $1,6002021-05-25 HIGH 8.8 CVE-2021-30123 FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution. Ffmpeg No fix yet Fix from $1,9502021-04-07 MEDIUM 6.5 CVE-2019-13390 In FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in libavformat/rawenc.c. Ffmpeg No fix yet Fix from $1,6002019-07-07 HIGH 8.8 CVE-2019-13312 block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read. Ffmpeg Mitigation only Fix from $1,9502019-07-05 CRITICAL 9.8 CVE-2013-0870 The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check. Ffmpeg No fix yet Fix from $2,3002017-08-28 HIGH 7.5 CVE-2012-2805 Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service. Ffmpeg No fix yet Fix from $1,9502017-08-28 HIGH 8.3 CVE-2015-8663 The ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and height values after a failure, which allows remote attack… Ffmpeg Mitigation only Fix from $1,9502015-12-24 MEDIUM 6.8 CVE-2015-8363 The jpeg2000_read_main_headers function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enfo… Ffmpeg Mitigation only Fix from $1,6002015-11-26 MEDIUM 6.8 CVE-2011-3945 The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x bef… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-4364EPSS 5% Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; … Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-3940 nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-3947 Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2012-0853 The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav… Ffmpeg No fix yet Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2012-0858 The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-3929 The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x befo… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-0723 FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arb… Ffmpeg Mitigation only Fix from $1,6002011-05-20 HIGH 9.3 CVE-2010-4705 Integer overflow in the vorbis_residue_decode_internal function in libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has unspeci… Ffmpeg Mitigation only Fix from $1,9502011-01-22 HIGH 10.0 CVE-2009-4633EPSS 8% vorbis_dec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remote attackers to cause a denial … Ffmpeg No fix yet Fix from $1,9502010-02-10 HIGH 10.0 CVE-2009-4634EPSS 7% Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file … Ffmpeg No fix yet Fix from $1,9502010-02-10 HIGH 10.0 CVE-2009-4637EPSS 17% FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a stack-… Ffmpeg No fix yet Fix from $1,9502010-02-10 HIGH 9.3 CVE-2009-4631EPSS 5% Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code vi… Ffmpeg No fix yet Fix from $1,9502010-02-10 HIGH 9.3 CVE-2009-4635EPSS 8% FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly order… Ffmpeg No fix yet Fix from $1,9502010-02-10