Vulnerabilities (CVE)

Filtered by vendor Ffmpeg Subscribe
Total 428 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-0853 1 Ffmpeg 1 Ffmpeg 2024-02-04 9.3 HIGH N/A
The wavpack_decode_frame function in libavcodec/wavpack.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted WavPack data, which triggers an out-of-bounds array access, possibly due to an off-by-one error.
CVE-2013-7021 1 Ffmpeg 1 Ffmpeg 2024-02-04 6.8 MEDIUM N/A
The filter_frame function in libavfilter/vf_fps.c in FFmpeg before 2.1 does not properly ensure the availability of FIFO content, which allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact via crafted data.
CVE-2013-0854 1 Ffmpeg 1 Ffmpeg 2024-02-04 9.3 HIGH N/A
The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data.
CVE-2013-0855 1 Ffmpeg 1 Ffmpeg 2024-02-04 9.3 HIGH N/A
Integer overflow in the alac_decode_close function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a large number of samples per frame in Apple Lossless Audio Codec (ALAC) data, which triggers an out-of-bounds array access.
CVE-2013-0872 1 Ffmpeg 1 Ffmpeg 2024-02-04 10.0 HIGH N/A
The swr_init function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or unsupported (1) input or (2) output channel layout, related to an out-of-bounds array access.
CVE-2013-7009 1 Ffmpeg 1 Ffmpeg 2024-02-04 6.8 MEDIUM N/A
The rpza_decode_stream function in libavcodec/rpza.c in FFmpeg before 2.1 does not properly maintain a pointer to pixel data, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Apple RPZA data.
CVE-2013-0863 1 Ffmpeg 1 Ffmpeg 2024-02-04 9.3 HIGH N/A
Buffer overflow in the rle_decode function in libavcodec/sanm.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.2 allows remote attackers to have an unspecified impact via crafted LucasArts Smush video data.
CVE-2011-3941 1 Ffmpeg 1 Ffmpeg 2024-02-04 7.5 HIGH N/A
The decode_mb function in libavcodec/error_resilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bounds write.