LI
Product
Libav
108
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 13Medium 46Low 2
Watch
Add Libav to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9820 | 5.5 | Mar 1 | libavcodec/mpegvideo_motion.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value Affected: 11.8 |
| CVE-2016-9819 | 5.5 | Mar 1 | libavcodec/mpegvideo.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value Affected: 11.8 |
| CVE-2016-8676 | 5.5 | Feb 15 | The get_vlc2 function in get_bits.h in Libav 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted mp3 file Affected: through 11.8 |
| CVE-2016-8675 | 5.5 | Feb 15 | The get_vlc2 function in get_bits.h in Libav before 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted mp3 file, possibly… Affected: through 11.8 |
| CVE-2016-7499 | 5.5 | Feb 15 | The sbr_make_f_master function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file Affected: 11.7 |
| CVE-2016-7477 | 5.5 | Feb 15 | The ff_put_pixels8_xy2_mmx function in rnd_template.c in Libav 11.7 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted mp3 file Affected: 11.7 |
| CVE-2016-7393 | 5.5 | Feb 15 | Stack-based buffer overflow in the aac_sync function in aac_parser.c in Libav before 11.5 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted… Affected: through 11.4 |
| CVE-2016-6832 | 5.5 | Feb 15 | Heap-based buffer overflow in the ff_audio_resample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service (crash) via vectors related to… Affected: through 11.3 |
| CVE-2016-7424 | 5.5 | Oct 7 | The put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash)… Affected: through 11.7 |
| CVE-2025-8585 | 5.3 | Aug 5 | libav DSS File Demuxer avconv.c main double free Affected: through 12.3 |
| CVE-2025-8586 | 3.3 | Aug 5 | libav MPEG File Parser utils.c ff_seek_frame_binary null pointer dereference Affected: through 12.3 |
| CVE-2025-8584 | 3.3 | Aug 5 | libav AVI File Parser buffer.c av_buffer_unref null pointer dereference Affected: through 12.3 |
| CVE-2015-3395 | – | Jun 16 | The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and… Affected: through 10.6; 11.0; 11.1; 11.2; 11.3 |
| CVE-2014-5271 | – | Nov 3 | Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and… Affected: through 10.4; 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; +34 more |
| CVE-2014-3984 | – | Jun 6 | Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors Affected: through 0.8.11; 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; +7 more |
| CVE-2011-3937 | – | Jan 5 | The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +18 more |
| CVE-2012-5144 | – | Dec 12 | Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.8.4; +9 more |
| CVE-2012-2804 | – | Sep 10 | Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors, related to "reallocation code" and the… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.8.4 |
| CVE-2012-2803 | – | Sep 10 | Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.8.4; +9 more |
| CVE-2012-2802 | – | Sep 10 | Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3 |
| CVE-2012-2801 | – | Sep 10 | Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.7; +8 more |
| CVE-2012-2800 | – | Sep 10 | Unspecified vulnerability in the ff_ivi_process_empty_tile function in libavcodec/ivi_common.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.7; +8 more |
| CVE-2012-2798 | – | Sep 10 | Unspecified vulnerability in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.7; +8 more |
| CVE-2012-2797 | – | Sep 10 | Unspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.8.4 |
| CVE-2012-2796 | – | Sep 10 | Unspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3 |
| CVE-2012-2794 | – | Sep 10 | Unspecified vulnerability in the decode_mb_info function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and… Affected: 0.7; 0.7; 0.7; 0.7.1; 0.7.2; 0.7.3; +8 more |
| CVE-2012-2793 | – | Sep 10 | Unspecified vulnerability in the lag_decode_zero_run_line function in libavcodec/lagarith.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown… Affected: 0.7; 0.7; 0.7; 0.7.1; 0.7.2; 0.7.3; +8 more |
| CVE-2012-2791 | – | Sep 10 | Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcodec/ in FFmpeg before 0.11,… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.8.4; +9 more |
| CVE-2012-2790 | – | Sep 10 | Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact… Affected: 0.7; 0.7; 0.7; 0.7.1; 0.7.2; 0.7.3; +8 more |
| CVE-2012-2789 | – | Sep 10 | Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact… Affected: 0.7; 0.7; 0.7; 0.7.1; 0.7.2; 0.7.3; +8 more |
| CVE-2012-2788 | – | Sep 10 | Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.7; +8 more |
| CVE-2012-2787 | – | Sep 10 | Unspecified vulnerability in the decode_frame function in libavcodec/indeo4.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3 |
| CVE-2012-2786 | – | Sep 10 | Unspecified vulnerability in the decode_wdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.7; +8 more |
| CVE-2012-2784 | – | Sep 10 | Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.7; +8 more |
| CVE-2012-2783 | – | Sep 10 | Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.8.4; +9 more |
| CVE-2012-2779 | – | Sep 10 | Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and… Affected: 0.7; 0.7; 0.7; 0.7.1; 0.7.2; 0.7.3; +8 more |
| CVE-2012-2777 | – | Sep 10 | Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.7; +8 more |
| CVE-2012-2776 | – | Sep 10 | Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3 |
| CVE-2012-2775 | – | Sep 10 | Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.7; +8 more |
| CVE-2012-2772 | – | Sep 10 | Unspecified vulnerability in the ff_rv34_decode_frame function in libavcodec/rv34.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact… Affected: 0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.7; +8 more |
| CVE-2011-4579 | – | Aug 20 | The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +9 more |
| CVE-2011-4364 | – | Aug 20 | Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +9 more |
| CVE-2011-4353 | – | Aug 20 | The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +9 more |
| CVE-2011-4352 | – | Aug 20 | Integer overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8;… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +8 more |
| CVE-2011-3945 | – | Aug 20 | The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6,… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +17 more |
| CVE-2012-0947 | – | Aug 20 | Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +19 more |
| CVE-2012-0858 | – | Aug 20 | The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +15 more |
| CVE-2012-0853 | – | Aug 20 | The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +17 more |
| CVE-2012-0852 | – | Aug 20 | The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +18 more |
| CVE-2012-0851 | – | Aug 20 | The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x… Affected: 0.5; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; +18 more |