Debian Ffmpeg vulnerabilities

CVE-2025-69693 [MEDIUM] CVE-2025-69693: ffmpeg - Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60de... Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c). The quantization parameter (qp) validation at line 2267 only checks the lower bound (qp < 0) but is missing upper bound validation. The qp value can reach 65 (base value 63 from 6-bit frame header + offset +2 from read_qp_offset) while the rv60_qp_to_idx array has size 64 (valid i

CVE-2015-3417 [MEDIUM] CVE-2015-3417: ffmpeg - Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h... Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demonstrated by an HTML VIDEO element that references H.264 data. Scope: local bookworm: resolved (fixed in 7:2.6.1-1) bull

CVE-2017-14223 [MEDIUM] CVE-2017-14223: ffmpeg - In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due... In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since there is no EOF che

CVE-2017-14222 [MEDIUM] CVE-2017-14222: ffmpeg - In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF... In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU and memory resources, since there is no EOF check i

CVE-2017-14058 [MEDIUM] CVE-2017-14058: ffmpeg - In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not re... In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service (infinite loop). Scope: local bookworm: resolved (fixed in 7:3.3.4-1) bullseye: resolved (fixed in 7:3.3.4-1) forky: resolved (fixed in 7:3.3.4-1) sid: resolved (fixed in 7:3.3.4-

CVE-2016-2213 [MEDIUM] CVE-2016-2213: ffmpeg - The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2... The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service (out-of-bounds array read access) via crafted JPEG 2000 data. Scope: local bookworm: resolved (fixed in 7:2.8.6-1) bullseye: resolved (fixed in 7:2.8.6-1) forky: resolved (fixed in 7:2.8.6-1) sid: resolved (fixed in 7:2.8.6-1) trix

CVE-2017-14056 [MEDIUM] CVE-2017-14056: ffmpeg - In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of ... In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but does not contain sufficient backing data, is provided, the loops (for offset and size tables) would consume huge CPU and memory res

CVE-2017-14055 [MEDIUM] CVE-2017-14055: ffmpeg - In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of... In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but does not contain sufficient backing data, is provided, the loop over the frames would consume huge CPU and memory resources, since th

CVE-2017-14057 [MEDIUM] CVE-2017-14057: ffmpeg - In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) ... In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name and markers would consume huge CPU and memory resources, since th

CVE-2017-14171 [MEDIUM] CVE-2017-14171: ffmpeg - In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header(... In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted NSV file, which claims a large "table_entries_used" field in the header but does not contain sufficient backing data, is provided, the loop over 'table_entries_used' would consume huge CPU resou

CVE-2020-22028 [MEDIUM] CVE-2020-22028: ffmpeg - Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at lib... Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service. Scope: local bookworm: resolved (fixed in 7:4.3-2) bullseye: resolved (fixed in 7:4.3-2) forky: resolved (fixed in 7:4.3-2) sid: resolved (fixed in 7:4.3-2) trixie: resolved (fixed in 7:4.3-2)

CVE-2020-22021 [MEDIUM] CVE-2020-22021: ffmpeg - Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfil... Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Service. Scope: local bookworm: resolved (fixed in 7:4.3.2-0+deb11u2) bullseye: resolved (fixed in 7:4.3.2-0+deb11u2) forky: resolved (fixed in 7:4.3.2-0+deb11u2) sid: resolved (fixed in 7:4.3.2-0+deb11u2) trixie:

CVE-2020-22020 [MEDIUM] CVE-2020-22020: ffmpeg - Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in li... Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Denial of Service. Scope: local bookworm: resolved (fixed in 7:4.3-2) bullseye: resolved (fixed in 7:4.3-2) forky: resolved (fixed in 7:4.3-2) sid: resolved (fixed in 7:4.3-2) trixie: resolved (fixed in 7:4.3-2)

CVE-2020-20448 [MEDIUM] CVE-2020-20448: ffmpeg - FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c,... FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service. Scope: local bookworm: resolved (fixed in 7:4.3-2) bullseye: resolved (fixed in 7:4.3-2) forky: resolved (fixed in 7:4.3-2) sid: resolved (fixed in 7:4.3-2) trixie: resolved (fixed in 7:4.3-2)

CVE-2023-6602 [MEDIUM] CVE-2023-6602: ffmpeg - A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible dat... A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists. Scope: local bookworm: resolved (fixed in 7:5.1.7-0+deb12u1) bullseye: resolved (fixed in 7:4.3.9-0+deb11u1) forky: resolved (fixed in 7:7.1.1-1) sid: resolved (fixed in 7:7.1.1-1) trixie: resolved (fix

CVE-2023-6604 [MEDIUM] CVE-2023-6604: ffmpeg - A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU ... A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation. Scope: local bookworm: resolved (fixed in 7:5.1.7-0+deb12u1) bullseye: resolved (fixed in 7:4.3.9-0+de

CVE-2013-7010 [MEDIUM] CVE-2013-7010: ffmpeg - Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 ... Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg before 2.1 allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data. Scope: local bookworm: resolved (fixed in 7:2.4.1-1) bullseye: resolved (fixed in 7:2.4.1-1) forky: resolved (fixed in 7:2.4.1-1) sid: resolved (fix

CVE-2018-7751 [MEDIUM] CVE-2018-7751: ffmpeg - The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows r... The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file. Scope: local bookworm: resolved (fixed in 7:3.4.3-1) bullseye: resolved (fixed in 7:3.4.3-1) forky: resolved (fixed in 7:3.4.3-1) sid: resolved (fixed in 7:3.4.3-1) trixie: resolved (fixed in 7:3.4.3-1)

CVE-2025-0518 [MEDIUM] CVE-2025-0518: ffmpeg - Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read S... Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C . This issue affects FFmpeg: 7.1. Issue was fixed: https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38

CVE-2018-7557 [MEDIUM] CVE-2018-7557: ffmpeg - The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 ... The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service (Out of array read) via an AVI file with crafted dimensions within chroma subsampling data. Scope: local bookworm: resolved (fixed in 7:3.4.3-1) bullseye: resolved (fixed in 7:3.4.3-1) forky: resolved (fixed in 7:3.4.3-1) sid: resolved