FF
Product
FFmpeg
533
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Severity mix
Critical 30High 145Medium 146Low 3
Watch
Add FFmpeg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-0858 | – | Dec 7 | The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding… Affected: through 1.0.3; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0857 | – | Dec 7 | The decode_frame_ilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted height value in IFF PBM/ILBM bitmap… Affected: through 1.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0856 | – | Dec 7 | The lpc_prediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossless Audio Codec (ALAC) data,… Affected: through 1.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0855 | – | Dec 7 | Integer overflow in the alac_decode_close function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a large number of samples… Affected: through 1.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0854 | – | Dec 7 | The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data Affected: through 1.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0853 | – | Dec 7 | The wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an… Affected: through 1.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0852 | – | Dec 7 | The parse_picture_segment function in libavcodec/pgssubdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted RLE data, which triggers an… Affected: through 1.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0851 | – | Dec 7 | The decode_frame function in libavcodec/eamad.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Electronic Arts Madcow video data, which… Affected: through 1.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0850 | – | Dec 7 | The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an… Affected: through 1.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0849 | – | Dec 7 | The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted (1) width or (2) height dimension… Affected: through 1.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0848 | – | Dec 7 | The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor… Affected: through 1.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0847 | – | Dec 7 | The ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an… Affected: through 1.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0846 | – | Dec 7 | Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data,… Affected: through 1.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0845 | – | Dec 7 | libavcodec/alsdec.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via a crafted block length, which triggers an out-of-bounds write Affected: through 1.0.3; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0844 | – | Dec 7 | Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which… Affected: through 1.0.3; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0869 | – | Nov 23 | The field_end function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice… Affected: through 1.1.1; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0868 | – | Nov 23 | libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and (1) unchecked… Affected: through 1.1.1; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0867 | – | Nov 23 | The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have… Affected: through 1.1.1; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0866 | – | Nov 23 | The aac_decode_init function in libavcodec/aacdec.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large number of… Affected: through 1.0.2; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0865 | – | Nov 23 | The vqa_decode_chunk function in libavcodec/vqavideo.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via a large (1) cbp0 or… Affected: through 1.0.2; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0864 | – | Nov 23 | The gif_copy_img_rect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "end pointer," which allows remote attackers to have an… Affected: through 1.1.1; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0863 | – | Nov 23 | Buffer overflow in the rle_decode function in libavcodec/sanm.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via crafted… Affected: through 1.0.3; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0862 | – | Nov 23 | Multiple integer overflows in the process_frame_obj function in libavcodec/sanm.c in FFmpeg before 1.1.2 allow remote attackers to have an unspecified impact via crafted image… Affected: through 1.1.1; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0861 | – | Nov 23 | The avcodec_decode_audio4 function in libavcodec/utils.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 allows remote attackers to trigger memory corruption via vectors related to… Affected: through 1.0.2; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0860 | – | Nov 23 | The ff_er_frame_end function in libavcodec/error_resilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which… Affected: through 1.0.3; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-4265 | – | Nov 23 | The av_reallocp_array function in libavutil/mem.c in FFmpeg before 2.0.1 has an unspecified impact and remote vectors related to a "wrong return code" and a resultant NULL pointer… Affected: through 2.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-4264 | – | Nov 23 | The kempf_decode_tile function in libavcodec/g2meet.c in FFmpeg before 2.0.1 allows remote attackers to cause a denial of service (out-of-bounds heap write) via a G2M4 encoded… Affected: through 2.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-4263 | – | Nov 23 | libavfilter in FFmpeg before 2.0.1 has unspecified impact and remote vectors related to a crafted "plane," which triggers an out-of-bounds heap write Affected: through 2.0; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0878 | – | Nov 23 | The advance_line function in libavcodec/targa.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted Targa image data, related to an… Affected: through 1.1.2; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0877 | – | Nov 23 | The old_codec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted LucasArts Smush data that has a large size… Affected: through 1.1.2; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0876 | – | Nov 23 | Multiple integer overflows in the (1) old_codec37 and (2) old_codec47 functions in libavcodec/sanm.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact… Affected: through 1.1.2; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0875 | – | Nov 23 | The ff_add_png_paeth_prediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an… Affected: through 1.1.2; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0874 | – | Nov 23 | The (1) doubles2str and (2) shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via a crafted TIFF image, related… Affected: through 1.1.2; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0873 | – | Nov 23 | The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid channel count, related to "freeing… Affected: through 1.1.2; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0872 | – | Nov 23 | The swr_init function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or unsupported (1) input or (2)… Affected: through 1.1.2; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-3675 | – | Jun 10 | The process_frame_obj function in sanm.c in libavcodec in FFmpeg before 1.2.1 does not validate width and height values, which allows remote attackers to cause a denial of service… Affected: through 1.2 |
| CVE-2013-3674 | – | Jun 10 | The cdg_decode_frame function in cdgraphics.c in libavcodec in FFmpeg before 1.2.1 does not validate the presence of non-header data in a buffer, which allows remote attackers to… Affected: through 1.2 |
| CVE-2013-3673 | – | Jun 10 | The gif_decode_frame function in gifdec.c in libavcodec in FFmpeg before 1.2.1 does not properly manage the disposal methods of frames, which allows remote attackers to cause a… Affected: through 1.2 |
| CVE-2013-3672 | – | Jun 10 | The mm_decode_inter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows… Affected: through 1.2 |
| CVE-2013-3671 | – | Jun 10 | The format_line function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset data during a certain category calculation, which allows remote attackers to cause a… Affected: through 1.2 |
| CVE-2013-3670 | – | Jun 10 | The rle_unpack function in vmdav.c in libavcodec in FFmpeg git 20130328 through 20130501 does not properly use the bytestream2 API, which allows remote attackers to cause a denial… Affected: through 1.2 |
| CVE-2013-2496 | – | Mar 9 | The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allows remote attackers to cause a… Affected: through 1.1.3; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-2495 | – | Mar 9 | The iff_read_header function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format (IFF) data during operations involving… Affected: through 1.1.3; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-2277 | – | Feb 27 | The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 1.1.3 does not validate the relationship between luma depth and chroma depth, which… Affected: through 1.1.2; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-2276 | – | Feb 27 | The avcodec_decode_audio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with certain skip operations, which allows… Affected: through 1.1.2; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2013-0894 | – | Feb 23 | Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before… Affected: through 1.1.3 |
| CVE-2011-3937 | – | Jan 5 | The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before… Affected: through 0.9.1; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2804 | – | Sep 10 | Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors, related to "reallocation code" and the… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2803 | – | Sep 10 | Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
| CVE-2012-2802 | – | Sep 10 | Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related… Affected: through 0.10.4; 0.3; 0.3.1; 0.3.2; 0.3.3; 0.3.4; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)