CVE-2021-28429
Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service (DoS) via crafted .mov file.
- Update to 7:4.2.7-0ubuntu0.1
Published Updated
PatchFirst · Latest vulnerabilities
ffmpeg vulnerabilities
Vulnerabilities published for ffmpeg in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 43
CVE-2021-38171
adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a necessary step because the second argument to init_get_bits can be crafted.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2021-38291
FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion failure at src/libavutil/mathematics.c.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2020-21688
A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2020-21697
A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2021-38114
libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2020-22054
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c.
- Update to 7:4.2.4-1ubuntu0.1
Published UpdatedCVE-2020-22049
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c.
- Update to 7:4.2.4-1ubuntu0.1
Published UpdatedCVE-2020-22046
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c.
- Update to 7:4.2.4-1ubuntu0.1
Published UpdatedCVE-2020-22042
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graphparser.c.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2020-22041
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2020-22037
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2020-22036
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might lead to memory corruption and other potential consequences.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2020-22035
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might lead to memory corruption and other potential consequences.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2020-22034
A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory corruption and other potential consequences.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2020-22033
A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, which could let a remote malicious user cause a Denial of Service.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2020-22032
A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which might lead to memory corruption and other potential consequences.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2020-22016
A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might lead to memory corruption and other potential consequences.
- Update to 7:4.2.4-1ubuntu0.1
Published UpdatedCVE-2020-22017
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences.
- Update to 7:4.2.7-0ubuntu0.1
Published UpdatedCVE-2020-22022
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which might lead to memory corruption and other potential consequences.
- Update to 7:4.2.7-0ubuntu0.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.