FF
Product
FFmpeg
533
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Severity mix
Critical 30High 145Medium 146Low 3
Watch
Add FFmpeg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-2801 | – | Sep 10 | Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2800 | – | Sep 10 | Unspecified vulnerability in the ff_ivi_process_empty_tile function in libavcodec/ivi_common.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2799 | – | Sep 10 | Unspecified vulnerability in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the "put bit buffer when num_saved_bits is reset." Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2798 | – | Sep 10 | Unspecified vulnerability in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2797 | – | Sep 10 | Unspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2796 | – | Sep 10 | Unspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2795 | – | Sep 10 | Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors related to (1) size of "mclms arrays," (2) "a… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2794 | – | Sep 10 | Unspecified vulnerability in the decode_mb_info function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2793 | – | Sep 10 | Unspecified vulnerability in the lag_decode_zero_run_line function in libavcodec/lagarith.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2792 | – | Sep 10 | Unspecified vulnerability in the decode_init function in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the samples per frame Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2791 | – | Sep 10 | Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcodec/ in FFmpeg before 0.11,… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2790 | – | Sep 10 | Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2789 | – | Sep 10 | Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2788 | – | Sep 10 | Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2787 | – | Sep 10 | Unspecified vulnerability in the decode_frame function in libavcodec/indeo4.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2786 | – | Sep 10 | Unspecified vulnerability in the decode_wdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2785 | – | Sep 10 | Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors, related to (1) "some subframes only encode some… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2784 | – | Sep 10 | Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2783 | – | Sep 10 | Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2782 | – | Sep 10 | Unspecified vulnerability in the decode_slice_header function in libavcodec/h264.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to a "rejected resolution… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2779 | – | Sep 10 | Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2777 | – | Sep 10 | Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2776 | – | Sep 10 | Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2775 | – | Sep 10 | Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2774 | – | Sep 10 | The ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors,… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2772 | – | Sep 10 | Unspecified vulnerability in the ff_rv34_decode_frame function in libavcodec/rv34.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-0855 | – | Aug 27 | Heap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service… Affected: through 0.9; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-0849 | – | Aug 27 | Integer overflow in the ff_j2k_dwt_init function in libavcodec/j2k_dwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (segmentation fault and… Affected: through 0.9; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2011-4579 | – | Aug 20 | The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +16 more |
| CVE-2011-4364 | – | Aug 20 | Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +19 more |
| CVE-2011-4353 | – | Aug 20 | The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +16 more |
| CVE-2011-4352 | – | Aug 20 | Integer overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8;… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.4.5; +22 more |
| CVE-2011-3945 | – | Aug 20 | The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6,… Affected: 0.7; 0.7.1; 0.7.2; 0.7.3; 0.7.6; 0.7.7; +11 more |
| CVE-2012-0857 | – | Aug 20 | Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a denial of service… Affected: through 0.9; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-0856 | – | Aug 20 | Heap-based buffer overflow in the MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabled, allows remote attackers to cause a… Affected: through 0.9; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-0854 | – | Aug 20 | The dpcm_decode_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows remote attackers to cause a… Affected: through 0.9; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-0850 | – | Aug 20 | The sbr_qmf_synthesis function in libavcodec/aacsbr.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted mpg file that… Affected: through 0.9; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-0848 | – | Aug 20 | Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via… Affected: 0.9.1 |
| CVE-2012-0847 | – | Aug 20 | Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service… Affected: through 0.9; 0.7.1; 0.7.2; 0.7.7; 0.7.8; 0.7.9; +8 more |
| CVE-2012-0859 | – | Aug 20 | The render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) and possibly… Affected: through 0.9; 0.7.1; 0.7.2; 0.7.7; 0.7.8; 0.7.9; +8 more |
| CVE-2012-0858 | – | Aug 20 | The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and… Affected: 0.7.1; 0.7.2; 0.7.6; 0.7.7; 0.7.8; 0.7.9; +6 more |
| CVE-2012-0853 | – | Aug 20 | The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x… Affected: 0.7; 0.7.1; 0.7.2; 0.7.3; 0.7.6; 0.7.7; +11 more |
| CVE-2012-0852 | – | Aug 20 | The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3… Affected: through 0.9; 0.7.1; 0.7.2; 0.7.7; 0.7.8; 0.7.9; +8 more |
| CVE-2012-0851 | – | Aug 20 | The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x… Affected: through 0.9; 0.7.1; 0.7.2; 0.7.7; 0.7.8; 0.7.9; +8 more |
| CVE-2011-3952 | – | Aug 20 | The decode_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows… Affected: through 0.9.1; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2011-3951 | – | Aug 20 | The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.1 allows… Affected: through 0.9.1; 0.7.1; 0.7.2; 0.7.7; 0.7.8; 0.7.9; +9 more |
| CVE-2011-3947 | – | Aug 20 | Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and… Affected: 0.7.1; 0.7.2; 0.7.6; 0.7.7; 0.7.8; 0.7.9; +6 more |
| CVE-2011-3940 | – | Aug 20 | nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1,… Affected: 0.7.1; 0.7.2; 0.7.6; 0.7.7; 0.7.8; 0.7.9; +6 more |
| CVE-2011-3936 | – | Aug 20 | The dv_extract_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and… Affected: 0.7; 0.7.1; 0.7.2; 0.7.3; 0.7.6; 0.7.7; +12 more |
| CVE-2011-3929 | – | Aug 20 | The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5,… Affected: 0.7.1; 0.7.2; 0.7.6; 0.7.7; 0.7.8; 0.7.9; +6 more |
The 500 most important CVEs for this product (exploited first, then by severity)