Debian Ffmpeg vulnerabilities

CVE-2016-2330 [HIGH] CVE-2016-2330: ffmpeg - libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer siz... libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .tga file, related to the gif_image_write_image, gif_encode_init, and gif_encode_close functions. Scope: local bookworm: resolved (fixed in 2.8.

CVE-2017-15672 [HIGH] CVE-2017-15672: ffmpeg - The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and pos... The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read. Scope: local bookworm: resolved (fixed in 7:3.4-1) bullseye: resolved (fixed in 7:3.4-1) forky: resolved (fixed in 7:3.4-1) sid: resolved (fixed in 7:3.4-1) trixi

CVE-2016-1897 [MEDIUM] CVE-2016-1897: ffmpeg - FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbi... FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file. Scope: local bookworm: resolved (fixed in 7:2.8.5-1) bullseye: resolved (fixed in 7:2.8.5-1) forky: reso

CVE-2012-2784 [CRITICAL] CVE-2012-2784: ffmpeg - Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in ... Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing in CAVS," a different vulnerability than CVE-2012-2777. Scope: local bookworm: resolved (fixed in 7:2.4.1-1) bullseye: resolved (fixed in 7:2

CVE-2012-2779 [CRITICAL] CVE-2012-2779: ffmpeg - Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in... Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an invalid "gop header" and decoding in a "half initialized context." Scope: local bookworm: resolved (fixed in 7:2.4.1-1) bullseye: resolved (fixed in 7:2.4.1-1)

CVE-2012-2776 [CRITICAL] CVE-2012-2776: ffmpeg - Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.... Unspecified vulnerability in the decode_cell_data function in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to an "out of picture write." Scope: local bookworm: resolved (fixed in 7:2.4.1-1) bullseye: resolved (fixed in 7:2.4.1-1) forky: resolved (fixed in 7:2.4.1-1) sid: resolved (fixed in 7:2

CVE-2012-2772 [CRITICAL] CVE-2012-2772: ffmpeg - Unspecified vulnerability in the ff_rv34_decode_frame function in libavcodec/rv3... Unspecified vulnerability in the ff_rv34_decode_frame function in libavcodec/rv34.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing with frame threading." Scope: local bookworm: resolved (fixed in 7:2.4.1-1) bullseye: resolved (fixed in 7:2.4.1-1) forky: resolved (f

CVE-2020-35965 [HIGH] CVE-2020-35965: ffmpeg - decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write beca... decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations. Scope: local bookworm: resolved (fixed in 7:4.3.1-6) bullseye: resolved (fixed in 7:4.3.1-6) forky: resolved (fixed in 7:4.3.1-6) sid: resolved (fixed in 7:4.3.1-6) trixie: resolved (fixed in 7:4.3.1-6)

CVE-2015-8662 [HIGH] CVE-2015-8662: ffmpeg - The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 do... The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data. Scope: local bookworm:

CVE-2023-50010 [HIGH] CVE-2023-50010: ffmpeg - FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff_gradfun_blur_line_mo... FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff_gradfun_blur_line_movdqa_sse2, as demonstrated by a call to the set_encoder_id function in /fftools/ffmpeg_enc.c component. Scope: local bookworm: resolved (fixed in 7:5.1.5-0+deb12u1) bullseye: resolved (fixed in 7:4.3.7-0+deb11u1) forky: resolved (fixed in 7:7.0.1-3) sid: resolved (fixed in 7:7.0.1-3) trix

CVE-2013-0856 [CRITICAL] CVE-2013-0856: ffmpeg - The lpc_prediction function in libavcodec/alac.c in FFmpeg before 1.1 allows rem... The lpc_prediction function in libavcodec/alac.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Apple Lossless Audio Codec (ALAC) data, related to a large nb_samples value. Scope: local bookworm: resolved (fixed in 7:2.4.1-1) bullseye: resolved (fixed in 7:2.4.1-1) forky: resolved (fixed in 7:2.4.1-1) sid: resolved (fixed in

CVE-2025-63757 [HIGH] CVE-2025-63757: ffmpeg - Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswsca... Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0. Scope: local bookworm: resolved (fixed in 7:5.1.8-0+deb12u1) bullseye: resolved (fixed in 7:4.3.9-0+deb11u2) forky: resolved (fixed in 7:7.1.3-1) sid: resolved (fixed in 7:7.1.3-1) trixie: resolved (fixed in 7:7.1.3-0+deb13u1)

CVE-2016-2329 [HIGH] CVE-2016-2329: ffmpeg - libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip... libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted TIFF file, related to the tiff_decode_tag and decode_frame functions. Scope: local bookworm: res

CVE-2016-2327 [HIGH] CVE-2016-2327: ffmpeg - libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain ... libavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .avi file, related to the apng_encode_frame and encode_apng functions. Scope: local bookworm: resolved (fixed in 2.8.5-1) bullsey

CVE-2019-11338 [HIGH] CVE-2019-11338: ffmpeg - libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate f... libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data. Scope: local bookworm: resolved (fixed in 7:4.1.3-1) bullseye: resolved (fixed in 7:4.1.3-1) forky: r

CVE-2018-9841 [HIGH] CVE-2018-9841: ffmpeg - The export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows... The export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a long filename. Scope: local bookworm: resolved (fixed in 7:3.4.3-1) bullseye: resolved (fixed in 7:3.4.3-1) forky: resolved (fixed in 7:3.4.3-1) sid: resolved (fixed in 7:3.4

CVE-2012-2803 [CRITICAL] CVE-2012-2803: ffmpeg - Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12... Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value. Scope: local bookworm: resolved (fixed in 7:2.4.1-1) bullseye: resolved (fixed in 7:2.4.1-1) forky: resolved (fixed in 7:2.4.1-

CVE-2009-4631 [CRITICAL] CVE-2009-4631: ffmpeg - Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attacker... Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted VP3 file that triggers an out-of-bounds read and possibly memory corruption. Scope: local bookworm: resolved (fixed in 4:0.5+svn20090706-3) bullseye: resolved (fixed in 4:0.5+svn20090706-3) forky: resolved

CVE-2012-2775 [CRITICAL] CVE-2012-2775: ffmpeg - Unspecified vulnerability in the read_var_block_data function in libavcodec/alsd... Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large order and an "out of array write in quant_cof." Scope: local bookworm: resolved (fixed in 7:2.4.1-1) bullseye: resolved (fixed in 7:2.4.1-1) forky:

CVE-2018-15822 [HIGH] CVE-2018-15822: ffmpeg - The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does... The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, leading to an assertion failure. Scope: local bookworm: resolved (fixed in 7:4.0.3-1) bullseye: resolved (fixed in 7:4.0.3-1) forky: resolved (fixed in 7:4.0.3-1) sid: resolved (fixed in 7:4.0.3-1) trixie: resolved (fixed in 7:4.0.3-1)