Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ffmpeg ffmpeg 2.0.1 vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2014-2263
The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and previous versions, allows remote malicious users to have unspecified impact and vectors, which trigger an out-of-bounds write.
Ffmpeg Ffmpeg
Ffmpeg Ffmpeg 2.0
Ffmpeg Ffmpeg 2.0.3
Ffmpeg Ffmpeg 2.0.2
Ffmpeg Ffmpeg 2.0.1
6.8
CVSSv2
CVE-2014-2099
The msrle_decode_frame function in libavcodec/msrle.c in FFmpeg prior to 2.1.4 does not properly calculate line sizes, which allows remote malicious users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Microsoft RLE...
Ffmpeg Ffmpeg 2.0
Ffmpeg Ffmpeg 2.0.3
Ffmpeg Ffmpeg 2.0.2
Ffmpeg Ffmpeg
Ffmpeg Ffmpeg 2.0.1
Ffmpeg Ffmpeg 2.1.1
Ffmpeg Ffmpeg 2.1
Ffmpeg Ffmpeg 2.1.2
6.8
CVSSv2
CVE-2014-2097
The tak_decode_frame function in libavcodec/takdec.c in FFmpeg prior to 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote malicious users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via cr...
Ffmpeg Ffmpeg 2.0
Ffmpeg Ffmpeg 2.0.3
Ffmpeg Ffmpeg 2.0.2
Ffmpeg Ffmpeg
Ffmpeg Ffmpeg 2.0.1
Ffmpeg Ffmpeg 2.1.1
Ffmpeg Ffmpeg 2.1
Ffmpeg Ffmpeg 2.1.2
6.8
CVSSv2
CVE-2014-2098
libavcodec/wmalosslessdec.c in FFmpeg prior to 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote malicious users to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted WMA data.
Ffmpeg Ffmpeg 2.0
Ffmpeg Ffmpeg 2.0.3
Ffmpeg Ffmpeg 2.0.2
Ffmpeg Ffmpeg
Ffmpeg Ffmpeg 2.0.1
Ffmpeg Ffmpeg 2.1.1
Ffmpeg Ffmpeg 2.1
Ffmpeg Ffmpeg 2.1.2
6.8
CVSSv2
CVE-2014-5272
libavcodec/iff.c in FFMpeg prior to 1.1.14, 1.2.x prior to 1.2.8, 2.2.x prior to 2.2.7, and 2.3.x prior to 2.3.2 allows remote malicious users to have unspecified impact via a crafted iff image, which triggers an out-of-bounds array access, related to the rgb8 and rgbn formats.
Ffmpeg Ffmpeg 1.2.5
Ffmpeg Ffmpeg 2.3
Ffmpeg Ffmpeg
Ffmpeg Ffmpeg 2.2
Ffmpeg Ffmpeg 1.1.10
Ffmpeg Ffmpeg 2.0.4
Ffmpeg Ffmpeg 2.2.4
Ffmpeg Ffmpeg 1.1.2
Ffmpeg Ffmpeg 1.2.6
Ffmpeg Ffmpeg 1.1.6
Ffmpeg Ffmpeg 1.2
Ffmpeg Ffmpeg 1.1.1
Ffmpeg Ffmpeg 1.1.11
Ffmpeg Ffmpeg 1.1.4
Ffmpeg Ffmpeg 2.0
Ffmpeg Ffmpeg 2.0.3
Ffmpeg Ffmpeg 1.2.1
Ffmpeg Ffmpeg 1.1.8
Ffmpeg Ffmpeg 1.2.3
Ffmpeg Ffmpeg 1.2.4
Ffmpeg Ffmpeg 2.1.3
Ffmpeg Ffmpeg 1.1.5
7.5
CVSSv2
CVE-2013-4263
libavfilter in FFmpeg prior to 2.0.1 has unspecified impact and remote vectors related to a crafted "plane," which triggers an out-of-bounds heap write.
Ffmpeg Ffmpeg 1.2
Ffmpeg Ffmpeg 0.8.8
Ffmpeg Ffmpeg 0.8.7
Ffmpeg Ffmpeg 0.8.1
Ffmpeg Ffmpeg 0.8.0
Ffmpeg Ffmpeg 0.7.3
Ffmpeg Ffmpeg 0.7.2
Ffmpeg Ffmpeg 0.6.1
Ffmpeg Ffmpeg 0.6
Ffmpeg Ffmpeg 0.4.8
Ffmpeg Ffmpeg 0.4.7
Ffmpeg Ffmpeg 1.1.3
Ffmpeg Ffmpeg 1.1.2
Ffmpeg Ffmpeg 0.8.6
Ffmpeg Ffmpeg 0.8.5.4
Ffmpeg Ffmpeg 0.8.5.3
Ffmpeg Ffmpeg 0.7.9
Ffmpeg Ffmpeg 0.7.8
Ffmpeg Ffmpeg 0.7.12
Ffmpeg Ffmpeg 0.7.11
Ffmpeg Ffmpeg 0.5.4.6
Ffmpeg Ffmpeg 0.5.4.5
10
CVSSv2
CVE-2013-4265
The av_reallocp_array function in libavutil/mem.c in FFmpeg prior to 2.0.1 has an unspecified impact and remote vectors related to a "wrong return code" and a resultant NULL pointer dereference.
Ffmpeg Ffmpeg 0.8.8
Ffmpeg Ffmpeg 0.8.7
Ffmpeg Ffmpeg 0.8.10
Ffmpeg Ffmpeg 0.8.1
Ffmpeg Ffmpeg 0.7.4
Ffmpeg Ffmpeg 0.7.3
Ffmpeg Ffmpeg 0.6.1
Ffmpeg Ffmpeg 0.6
Ffmpeg Ffmpeg 0.5
Ffmpeg Ffmpeg 0.4.8
Ffmpeg Ffmpeg 0.4.0
Ffmpeg Ffmpeg 0.3.4
Ffmpeg Ffmpeg 0.3.3
Ffmpeg Ffmpeg 0.10
Ffmpeg Ffmpeg
Ffmpeg Ffmpeg 1.1.2
Ffmpeg Ffmpeg 1.1.1
Ffmpeg Ffmpeg 1.0
Ffmpeg Ffmpeg 0.8.5.3
Ffmpeg Ffmpeg 0.8.5
Ffmpeg Ffmpeg 0.7.8
Ffmpeg Ffmpeg 0.7.7
4.3
CVSSv2
CVE-2013-4264
The kempf_decode_tile function in libavcodec/g2meet.c in FFmpeg prior to 2.0.1 allows remote malicious users to cause a denial of service (out-of-bounds heap write) via a G2M4 encoded file.
Ffmpeg Ffmpeg 1.2
Ffmpeg Ffmpeg 0.8.8
Ffmpeg Ffmpeg 0.8.7
Ffmpeg Ffmpeg 0.8.6
Ffmpeg Ffmpeg 0.8.1
Ffmpeg Ffmpeg 0.8.0
Ffmpeg Ffmpeg 0.7.3
Ffmpeg Ffmpeg 0.7.2
Ffmpeg Ffmpeg 0.6
Ffmpeg Ffmpeg 0.5.4.6
Ffmpeg Ffmpeg 0.4.8
Ffmpeg Ffmpeg 0.4.7
Ffmpeg Ffmpeg 0.3.4
Ffmpeg Ffmpeg 0.3.3
Ffmpeg Ffmpeg
Ffmpeg Ffmpeg 1.1.4
Ffmpeg Ffmpeg 0.9.1
Ffmpeg Ffmpeg 0.9
Ffmpeg Ffmpeg 0.8.11
Ffmpeg Ffmpeg 0.8.10
Ffmpeg Ffmpeg 0.7.5
Ffmpeg Ffmpeg 0.7.4
4.3
CVSSv2
CVE-2016-1897
FFmpeg 2.x allows remote malicious users to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file.
Ffmpeg Ffmpeg 2.7.4
Ffmpeg Ffmpeg 2.7.3
Ffmpeg Ffmpeg 2.6.2
Ffmpeg Ffmpeg 2.6.1
Ffmpeg Ffmpeg 2.5.4
Ffmpeg Ffmpeg 2.5.3
Ffmpeg Ffmpeg 2.4.9
Ffmpeg Ffmpeg 2.4.8
Ffmpeg Ffmpeg 2.4
Ffmpeg Ffmpeg 2.3.6
Ffmpeg Ffmpeg 2.2.16
Ffmpeg Ffmpeg 2.2.15
Ffmpeg Ffmpeg 2.2.8
Ffmpeg Ffmpeg 2.2.7
Ffmpeg Ffmpeg 2.1.8
Ffmpeg Ffmpeg 2.1.7
Ffmpeg Ffmpeg 2.1
Ffmpeg Ffmpeg 2.0.7
Ffmpeg Ffmpeg 2.0
Ffmpeg Ffmpeg 2.8.4
Ffmpeg Ffmpeg 2.8.3
Ffmpeg Ffmpeg 2.7.2
2 Github repositories
4.3
CVSSv2
CVE-2016-1898
FFmpeg 2.x allows remote malicious users to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file.
Ffmpeg Ffmpeg 2.8.3
Ffmpeg Ffmpeg 2.8.2
Ffmpeg Ffmpeg 2.7
Ffmpeg Ffmpeg 2.6.6
Ffmpeg Ffmpeg 2.5.9
Ffmpeg Ffmpeg 2.5.8
Ffmpeg Ffmpeg 2.5.1
Ffmpeg Ffmpeg 2.5
Ffmpeg Ffmpeg 2.4.5
Ffmpeg Ffmpeg 2.4.4
Ffmpeg Ffmpeg 2.3.4
Ffmpeg Ffmpeg 2.3.3
Ffmpeg Ffmpeg 2.2.13
Ffmpeg Ffmpeg 2.2.12
Ffmpeg Ffmpeg 2.2.11
Ffmpeg Ffmpeg 2.2.4
Ffmpeg Ffmpeg 2.2.3
Ffmpeg Ffmpeg 2.1.5
Ffmpeg Ffmpeg 2.1.4
Ffmpeg Ffmpeg 2.0.4
Ffmpeg Ffmpeg 2.0.3
Ffmpeg Ffmpeg 2.8.1
1 Github repository
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671
unauthorized
CVE-2024-4776
CVE-2024-3407
CVE-2024-26026
CVE-2024-32888
wireless
CVE-2024-4656
template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »