Browse CVEs

HIGH 8.8 CVE-2021-38091 Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Serv… Ffmpeg Patch available Fix from $1,9502021-09-20 HIGH 8.8 CVE-2021-38092 Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Serv… Ffmpeg Patch available Fix from $1,9502021-09-20 HIGH 8.8 CVE-2021-38093 Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Servi… Ffmpeg Patch available Fix from $1,9502021-09-20 HIGH 8.8 CVE-2021-38094 Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Servic… Ffmpeg Patch available Fix from $1,9502021-09-20 HIGH 8.8 CVE-2020-20896 An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or othe… Ffmpeg Patch available Fix from $1,9502021-09-20 HIGH 8.8 CVE-2020-20898 Integer Overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Se… Ffmpeg Patch available Fix from $1,9502021-09-20 MEDIUM 6.5 CVE-2020-20902 A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denomin… Ffmpeg Patch available Fix from $1,6002021-09-20 HIGH 8.8 CVE-2020-20891 Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or ot… Ffmpeg No fix yet Fix from $1,9502021-09-20 HIGH 8.8 CVE-2020-20892 An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or… Ffmpeg No fix yet Fix from $1,9502021-09-20 HIGH 8.8 CVE-2021-33815 dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly checked. Ffmpeg Patch available Fix from $1,9502021-06-03 MEDIUM 6.5 CVE-2020-22056 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c. Ffmpeg No fix yet Fix from $1,6002021-06-02 MEDIUM 6.5 CVE-2020-22051 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c. Ffmpeg No fix yet Fix from $1,6002021-06-02 MEDIUM 6.5 CVE-2020-22038 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c. Ffmpeg No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22039 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function. Ffmpeg No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22040 A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c. Ffmpeg No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22043 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c. Ffmpeg No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22024 Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause … Ffmpeg No fix yet Fix from $1,6002021-05-26 HIGH 8.8 CVE-2020-24020 Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c due to a call to memcpy with… Ffmpeg Mitigation only Fix from $1,9502021-05-26 MEDIUM 6.5 CVE-2020-20448 FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service. Ffmpeg Mitigation only Fix from $1,6002021-05-25 HIGH 8.8 CVE-2021-30123 FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution. Ffmpeg No fix yet Fix from $1,9502021-04-07 HIGH 7.8 CVE-2020-24995 Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local… Ffmpeg Patch available Fix from $1,9502021-03-30 MEDIUM 6.5 CVE-2020-35964 track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing. Ffmpeg Patch available Fix from $1,6002021-01-03 HIGH 8.8 CVE-2020-14212 FFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.c calls ff_dnn_load_model_nat… Ffmpeg 4.3.1+ Fix from $1,9502020-06-16 HIGH 8.8 CVE-2014-4610 Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.… Ffmpeg 0.10.14 / 1.1.12+ Fix from $1,9502020-01-14 HIGH 8.8 CVE-2019-15942 FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645… Ffmpeg after 4.2 Fix from $1,9502019-09-05 MEDIUM 6.5 CVE-2019-13390 In FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in libavformat/rawenc.c. Ffmpeg No fix yet Fix from $1,6002019-07-07 HIGH 8.8 CVE-2019-13312 block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read. Ffmpeg Mitigation only Fix from $1,9502019-07-05 CRITICAL 9.8 CVE-2019-12730 aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of u… Ffmpeg 3.2.14+ Fix from $2,3002019-06-04 HIGH 8.8 CVE-2019-11339 The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of… Ffmpeg 4.0.4 / 4.1.2+ Fix from $1,9502019-04-19 MEDIUM 6.5 CVE-2019-1000016 FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbs_av1.c that can result in Denial of service.… Ffmpeg Patch available Fix from $1,6002019-02-04