Ffmpeg : Security Vulnerabilities, CVEs, CVSS score between 2 and 6.99
FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() function.
Max CVSS
5.5
EPSS Score
0.05%
Published
2023-10-27
Updated
2024-01-30
A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.
Max CVSS
5.3
EPSS Score
0.09%
Published
2023-01-12
Updated
2023-06-13
An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.
Max CVSS
5.5
EPSS Score
0.06%
Published
2022-05-02
Updated
2023-12-23
libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.
Max CVSS
5.5
EPSS Score
0.08%
Published
2021-08-04
Updated
2021-11-28
Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service (DoS) via crafted .mov file.
Max CVSS
5.5
EPSS Score
0.04%
Published
2023-08-11
Updated
2023-08-18
Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim (as long as the `-vcodec copy` option is passed to ffmpeg).
Max CVSS
5.5
EPSS Score
0.09%
Published
2021-08-05
Updated
2022-12-21
track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing.
Max CVSS
6.5
EPSS Score
0.28%
Published
2021-01-03
Updated
2022-08-06
FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity.
Max CVSS
5.5
EPSS Score
0.05%
Published
2021-11-10
Updated
2021-11-16
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c.
Max CVSS
6.5
EPSS Score
0.09%
Published
2021-06-02
Updated
2021-06-07
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c.
Max CVSS
6.5
EPSS Score
0.25%
Published
2021-06-02
Updated
2021-11-30
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c.
Max CVSS
6.5
EPSS Score
0.11%
Published
2021-06-02
Updated
2021-06-07
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c.
Max CVSS
6.5
EPSS Score
0.25%
Published
2021-06-02
Updated
2021-11-30
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c.
Max CVSS
6.5
EPSS Score
0.10%
Published
2021-06-02
Updated
2021-11-30
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c.
Max CVSS
6.5
EPSS Score
0.10%
Published
2021-06-02
Updated
2021-11-30
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c.
Max CVSS
6.5
EPSS Score
0.10%
Published
2021-06-01
Updated
2021-11-30
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c.
Max CVSS
6.5
EPSS Score
0.09%
Published
2021-06-01
Updated
2021-06-07
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graphparser.c.
Max CVSS
6.5
EPSS Score
0.10%
Published
2021-06-01
Updated
2021-11-30
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc.
Max CVSS
6.5
EPSS Score
0.10%
Published
2021-06-01
Updated
2021-11-30
A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c.
Max CVSS
6.5
EPSS Score
0.09%
Published
2021-06-01
Updated
2021-06-07
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function.
Max CVSS
6.5
EPSS Score
0.09%
Published
2021-06-01
Updated
2021-06-07
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c.
Max CVSS
6.5
EPSS Score
0.09%
Published
2021-06-01
Updated
2021-06-07
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.
Max CVSS
6.5
EPSS Score
0.38%
Published
2021-06-01
Updated
2021-11-30
A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, which could let a remote malicious user cause a Denial of Service.
Max CVSS
6.5
EPSS Score
0.28%
Published
2021-05-27
Updated
2022-10-26
Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service.
Max CVSS
6.5
EPSS Score
0.25%
Published
2021-05-26
Updated
2021-11-05
Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a Denial of Service.
Max CVSS
6.5
EPSS Score
0.19%
Published
2021-05-26
Updated
2021-11-05