← Back

Ffmpeg

ffmpeg

516 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Ffmpeg
ffmpeg
Lavf Demuxer
lavf_demuxer
Libavcodec
libavcodec
Libswresample
libswresample

CVEs (516)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 9, 2013
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Double free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The add_doubles_metadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array...Show more
The add_doubles_metadata function in libavcodec/tiff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a negative or zero count value in a TIFF image, which triggers an out-of-bounds array access.Show less
2Debian
Ffmpeg
2Debian Linux
Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The atrac3_decode_init function in libavcodec/atrac3.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via ATRAC3 data with the joint stereo coding mode set and fewer than two channels.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The decode_frame_ilbm function in libavcodec/iff.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted height value in IFF PBM/ILBM bitmap data.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The lpc_prediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossless Audio Codec (ALAC) data, related to a large nb_samples value.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
Integer overflow in the alac_decode_close function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a large number of samples per frame in Apple Lossless Audio Codec (AL...Show more
Integer overflow in the alac_decode_close function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a large number of samples per frame in Apple Lossless Audio Codec (ALAC) data, which triggers an out-of-bounds array access.Show less
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to...Show more
The wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error.Show less
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The parse_picture_segment function in libavcodec/pgssubdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted RLE data, which triggers an out-of-bounds array access.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The decode_frame function in libavcodec/eamad.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Electronic Arts Madcow video data, which triggers an out-of-bounds array access.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an out-of-bounds array access.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted (1) width or (2) height dimension that is not a multiple of sixteen in id...Show more
The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted (1) width or (2) height dimension that is not a multiple of sixteen in id RoQ video data.Show less
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to Y...Show more
The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access.Show less
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an out-of-bounds array access.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array acces...Show more
Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access.Show less
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
libavcodec/alsdec.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via a crafted block length, which triggers an out-of-bounds write.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Dec 7, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Nov 23, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The field_end function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access.
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Nov 23, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and (1) unchecked return codes from the init_vlc function a...Show more
libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and (1) unchecked return codes from the init_vlc function and (2) "len==0 cases."Show less
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Nov 23, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, r...Show more
The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access.Show less