← Back

Ffmpeg

ffmpeg

516 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Ffmpeg
ffmpeg
Lavf Demuxer
lavf_demuxer
Libavcodec
libavcodec
Libswresample
libswresample

CVEs (516)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the lag_decode_zero_run_line function in libavcodec/lagarith.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors related to "to...Show more
Unspecified vulnerability in the lag_decode_zero_run_line function in libavcodec/lagarith.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors related to "too many zeros."Show less
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the decode_init function in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to the samples per frame.
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcodec/ in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x befo...Show more
Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcodec/ in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, have unknown impact and attack vectors, related to the "transform size."Show less
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to the "numb...Show more
Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to the "number of decoded samples in first sub-block in BGMC mode."Show less
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large numb...Show more
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large number of vector coded coefficients (num_vec_coeffs).Show less
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of a...Show more
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."Show less
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the decode_frame function in libavcodec/indeo4.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "setup width/height."
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the decode_wdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array wri...Show more
Unspecified vulnerability in the decode_wdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array write."Show less
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple unspecified vulnerabilities in libavcodec/wmalosslessdec.c in FFmpeg before 0.11 have unknown impact and attack vectors, related to (1) "some subframes only encode some channels" or (2) a large order value.
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height cha...Show more
Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing in CAVS," a different vulnerability than CVE-2012-2777.Show less
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to "freeing the returned frame."
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the decode_slice_header function in libavcodec/h264.c in FFmpeg before 0.11 has unknown impact and attack vectors, related to a "rejected resolution change."
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an invalid "gop...Show more
Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an invalid "gop header" and decoding in a "half initialized context."Show less
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height cha...Show more
Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing in CAVS," a different vulnerability than CVE-2012-2784.Show less
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write."
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large o...Show more
Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large order and an "out of array write in quant_cof."Show less
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors, related to starting "a frame outside SETUP...Show more
The ff_MPV_frame_start function in libavcodec/mpegvideo.c in FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors, related to starting "a frame outside SETUP state."Show less
2Ffmpeg
Libav
2Ffmpeg
Libav
Apr 29, 2026
Sep 10, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the ff_rv34_decode_frame function in libavcodec/rv34.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/hei...Show more
Unspecified vulnerability in the ff_rv34_decode_frame function in libavcodec/rv34.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing with frame threading."Show less
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Aug 27, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Heap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via unspecified vectors related...Show more
Heap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via unspecified vectors related to the curtileno variable.Show less
1Ffmpeg
1Ffmpeg
Apr 29, 2026
Aug 27, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Integer overflow in the ff_j2k_dwt_init function in libavcodec/j2k_dwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted JPEG2000 image...Show more
Integer overflow in the ff_j2k_dwt_init function in libavcodec/j2k_dwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted JPEG2000 image that triggers an incorrect check for a negative value.Show less