Ffmpeg
Monthly
Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
The render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.
The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1,. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.
The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.
The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.
Out-of-bounds write in Alpine Linux's FFmpeg package (before 8.0-r0) can corrupt memory and compromise confidentiality and integrity on systems that decode untrusted media. Exploitation requires an adjacent-network position, a low-privilege foothold, and high-complexity conditions with no user interaction, per the assessed CVSS 3.1 vector, so practical exposure is narrower than the 8.7 CVSS 4.0 base score suggests. No public exploit is identified at time of analysis, EPSS is 0.02% (6th percentile), and no KEV listing exists; signals conflict on urgency, and the vendor-released patch is Alpine Linux ffmpeg 8.0-r0.
An out-of-bounds write in the FFmpeg package shipped by Alpine Linux before 8.0-r0 can corrupt memory when a victim processes attacker-controlled media, potentially exposing or altering data but not degrading availability. The assessed attack path is adjacent-network, high-complexity, unauthenticated, and requires victim interaction; the 8.7 CVSS 4.0 base score overstates practical risk because EPSS is only 0.02% (6th percentile) and no public exploit identified at time of analysis. Alpine users running ffmpeg-based decoders, transcoders, or preview generators on untrusted media are affected.
Use-after-free in Alpine Linux's FFmpeg package before 8.0-r0 can corrupt memory when the software decodes a crafted media file or stream, potentially leading to information disclosure or code execution within the decoding application. Exploitation requires the target to process attacker-controlled media and succeeds only under specific heap and timing conditions, making it high complexity; no public exploit code or CISA KEV entry was identified at time of analysis, and EPSS is 0.02%. The vendor CVSS 4.0 vector (adjacent, UI:P) and the independent CVSS 3.1 assessment (network, UI:R) differ, so exposure should be evaluated against the actual media-processing path.
Heap-based buffer overflow in the ws_snd_decode_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service (application crash) via a crafted media. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Heap-based buffer overflow in the avfilter_filter_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) via a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
The render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.
The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1,. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.
The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.
The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.
Out-of-bounds write in Alpine Linux's FFmpeg package (before 8.0-r0) can corrupt memory and compromise confidentiality and integrity on systems that decode untrusted media. Exploitation requires an adjacent-network position, a low-privilege foothold, and high-complexity conditions with no user interaction, per the assessed CVSS 3.1 vector, so practical exposure is narrower than the 8.7 CVSS 4.0 base score suggests. No public exploit is identified at time of analysis, EPSS is 0.02% (6th percentile), and no KEV listing exists; signals conflict on urgency, and the vendor-released patch is Alpine Linux ffmpeg 8.0-r0.
An out-of-bounds write in the FFmpeg package shipped by Alpine Linux before 8.0-r0 can corrupt memory when a victim processes attacker-controlled media, potentially exposing or altering data but not degrading availability. The assessed attack path is adjacent-network, high-complexity, unauthenticated, and requires victim interaction; the 8.7 CVSS 4.0 base score overstates practical risk because EPSS is only 0.02% (6th percentile) and no public exploit identified at time of analysis. Alpine users running ffmpeg-based decoders, transcoders, or preview generators on untrusted media are affected.
Use-after-free in Alpine Linux's FFmpeg package before 8.0-r0 can corrupt memory when the software decodes a crafted media file or stream, potentially leading to information disclosure or code execution within the decoding application. Exploitation requires the target to process attacker-controlled media and succeeds only under specific heap and timing conditions, making it high complexity; no public exploit code or CISA KEV entry was identified at time of analysis, and EPSS is 0.02%. The vendor CVSS 4.0 vector (adjacent, UI:P) and the independent CVSS 3.1 assessment (network, UI:R) differ, so exposure should be evaluated against the actual media-processing path.