Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ffmpeg ffmpeg 2.2.4 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2014-9316
The mjpeg_decode_app function in libavcodec/mjpegdec.c in FFMpeg prior to 2.1.6, 2.2.x up to and including 2.3.x, and 2.4.x prior to 2.4.4 allows remote malicious users to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via vectors...
Ffmpeg Ffmpeg 2.3
Ffmpeg Ffmpeg 2.3.3
Ffmpeg Ffmpeg 2.2
Ffmpeg Ffmpeg 2.4.1
Ffmpeg Ffmpeg 2.2.4
Ffmpeg Ffmpeg 2.3.5
Ffmpeg Ffmpeg 2.4.3
Ffmpeg Ffmpeg 2.4.2
Ffmpeg Ffmpeg 2.3.2
Ffmpeg Ffmpeg
Ffmpeg Ffmpeg 2.3.4
Ffmpeg Ffmpeg 2.4
NA
CVE-2014-9318
The raw_decode function in libavcodec/rawdec.c in FFMpeg prior to 2.1.6, 2.2.x up to and including 2.3.x, and 2.4.x prior to 2.4.4 allows remote malicious users to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via a crafted .cine...
Ffmpeg Ffmpeg 2.3
Ffmpeg Ffmpeg 2.3.3
Ffmpeg Ffmpeg 2.2
Ffmpeg Ffmpeg 2.4.1
Ffmpeg Ffmpeg 2.2.4
Ffmpeg Ffmpeg 2.3.5
Ffmpeg Ffmpeg 2.4.3
Ffmpeg Ffmpeg 2.4.2
Ffmpeg Ffmpeg 2.3.2
Ffmpeg Ffmpeg
Ffmpeg Ffmpeg 2.3.4
Ffmpeg Ffmpeg 2.4
NA
CVE-2014-9319
The ff_hevc_decode_nal_sps function in libavcodec/hevc_ps.c in FFMpeg prior to 2.1.6, 2.2.x up to and including 2.3.x, and 2.4.x prior to 2.4.4 allows remote malicious users to cause a denial of service (out-of-bounds access) via a crafted .bit file.
Ffmpeg Ffmpeg 2.3
Ffmpeg Ffmpeg 2.3.3
Ffmpeg Ffmpeg 2.2
Ffmpeg Ffmpeg 2.4.1
Ffmpeg Ffmpeg 2.2.4
Ffmpeg Ffmpeg 2.3.5
Ffmpeg Ffmpeg 2.4.3
Ffmpeg Ffmpeg 2.4.2
Ffmpeg Ffmpeg 2.3.2
Ffmpeg Ffmpeg
Ffmpeg Ffmpeg 2.3.4
Ffmpeg Ffmpeg 2.4
NA
CVE-2014-9317
The decode_ihdr_chunk function in libavcodec/pngdec.c in FFMpeg prior to 2.1.6, 2.2.x up to and including 2.3.x, and 2.4.x prior to 2.4.4 allows remote malicious users to cause a denial of service (out-of-bounds heap access) and possibly have other unspecified impact via an IDAT ...
Ffmpeg Ffmpeg 2.3
Ffmpeg Ffmpeg 2.3.3
Ffmpeg Ffmpeg 2.2
Ffmpeg Ffmpeg 2.4.1
Ffmpeg Ffmpeg 2.2.4
Ffmpeg Ffmpeg 2.3.5
Ffmpeg Ffmpeg 2.4.3
Ffmpeg Ffmpeg 2.4.2
Ffmpeg Ffmpeg 2.3.2
Ffmpeg Ffmpeg
Ffmpeg Ffmpeg 2.3.4
Ffmpeg Ffmpeg 2.4
NA
CVE-2014-5272
libavcodec/iff.c in FFMpeg prior to 1.1.14, 1.2.x prior to 1.2.8, 2.2.x prior to 2.2.7, and 2.3.x prior to 2.3.2 allows remote malicious users to have unspecified impact via a crafted iff image, which triggers an out-of-bounds array access, related to the rgb8 and rgbn formats.
Ffmpeg Ffmpeg 1.2.5
Ffmpeg Ffmpeg 2.3
Ffmpeg Ffmpeg
Ffmpeg Ffmpeg 2.2
Ffmpeg Ffmpeg 1.1.10
Ffmpeg Ffmpeg 2.0.4
Ffmpeg Ffmpeg 2.2.4
Ffmpeg Ffmpeg 1.1.2
Ffmpeg Ffmpeg 1.2.6
Ffmpeg Ffmpeg 1.1.6
Ffmpeg Ffmpeg 1.2
Ffmpeg Ffmpeg 1.1.1
Ffmpeg Ffmpeg 1.1.11
Ffmpeg Ffmpeg 1.1.4
Ffmpeg Ffmpeg 2.0
Ffmpeg Ffmpeg 2.0.3
Ffmpeg Ffmpeg 1.2.1
Ffmpeg Ffmpeg 1.1.8
Ffmpeg Ffmpeg 1.2.3
Ffmpeg Ffmpeg 1.2.4
Ffmpeg Ffmpeg 2.1.3
Ffmpeg Ffmpeg 1.1.5
NA
CVE-2015-3395
The msrle_decode_pal4 function in msrledec.c in Libav prior to 10.7 and 11.x prior to 11.4 and FFmpeg prior to 2.0.7, 2.2.x prior to 2.2.15, 2.4.x prior to 2.4.8, 2.5.x prior to 2.5.6, and 2.6.x prior to 2.6.2 allows remote malicious users to have unspecified impact via a crafted...
Canonical Ubuntu Linux 12.04
Ffmpeg Ffmpeg 2.2.12
Ffmpeg Ffmpeg 2.2.8
Ffmpeg Ffmpeg 2.4.4
Ffmpeg Ffmpeg 2.5.0
Ffmpeg Ffmpeg 2.4.1
Ffmpeg Ffmpeg 2.2.4
Ffmpeg Ffmpeg 2.2.6
Ffmpeg Ffmpeg 2.2.3
Ffmpeg Ffmpeg 2.4.6
Ffmpeg Ffmpeg 2.6.0
Ffmpeg Ffmpeg 2.5.4
Ffmpeg Ffmpeg 2.2.1
Ffmpeg Ffmpeg 2.4.3
Ffmpeg Ffmpeg 2.2.14
Ffmpeg Ffmpeg 2.5.5
Ffmpeg Ffmpeg 2.4.7
Ffmpeg Ffmpeg 2.4.2
Ffmpeg Ffmpeg 2.4.5
Ffmpeg Ffmpeg 2.2.9
Ffmpeg Ffmpeg 2.2.11
Ffmpeg Ffmpeg 2.5.3
5.5
CVSSv3
CVE-2016-1897
FFmpeg 2.x allows remote malicious users to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file.
Ffmpeg Ffmpeg 2.7.4
Ffmpeg Ffmpeg 2.7.3
Ffmpeg Ffmpeg 2.6.2
Ffmpeg Ffmpeg 2.6.1
Ffmpeg Ffmpeg 2.5.4
Ffmpeg Ffmpeg 2.5.3
Ffmpeg Ffmpeg 2.4.9
Ffmpeg Ffmpeg 2.4.8
Ffmpeg Ffmpeg 2.4
Ffmpeg Ffmpeg 2.3.6
Ffmpeg Ffmpeg 2.2.16
Ffmpeg Ffmpeg 2.2.15
Ffmpeg Ffmpeg 2.2.8
Ffmpeg Ffmpeg 2.2.7
Ffmpeg Ffmpeg 2.1.8
Ffmpeg Ffmpeg 2.1.7
Ffmpeg Ffmpeg 2.1
Ffmpeg Ffmpeg 2.0.7
Ffmpeg Ffmpeg 2.0
Ffmpeg Ffmpeg 2.8.4
Ffmpeg Ffmpeg 2.8.3
Ffmpeg Ffmpeg 2.7.2
2 Github repositories
5.5
CVSSv3
CVE-2016-1898
FFmpeg 2.x allows remote malicious users to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file.
Ffmpeg Ffmpeg 2.8.3
Ffmpeg Ffmpeg 2.8.2
Ffmpeg Ffmpeg 2.7
Ffmpeg Ffmpeg 2.6.6
Ffmpeg Ffmpeg 2.5.9
Ffmpeg Ffmpeg 2.5.8
Ffmpeg Ffmpeg 2.5.1
Ffmpeg Ffmpeg 2.5
Ffmpeg Ffmpeg 2.4.5
Ffmpeg Ffmpeg 2.4.4
Ffmpeg Ffmpeg 2.3.4
Ffmpeg Ffmpeg 2.3.3
Ffmpeg Ffmpeg 2.2.13
Ffmpeg Ffmpeg 2.2.12
Ffmpeg Ffmpeg 2.2.11
Ffmpeg Ffmpeg 2.2.4
Ffmpeg Ffmpeg 2.2.3
Ffmpeg Ffmpeg 2.1.5
Ffmpeg Ffmpeg 2.1.4
Ffmpeg Ffmpeg 2.0.4
Ffmpeg Ffmpeg 2.0.3
Ffmpeg Ffmpeg 2.8.1
1 Github repository
NA
CVE-2014-8545
libavcodec/pngdec.c in FFmpeg prior to 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote malicious users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted PNG...
Ffmpeg Ffmpeg 0.7.7
Ffmpeg Ffmpeg 0.7.1
Ffmpeg Ffmpeg 1.2.5
Ffmpeg Ffmpeg 2.3
Ffmpeg Ffmpeg 0.11.4
Ffmpeg Ffmpeg 0.7.6
Ffmpeg Ffmpeg 0.4.5
Ffmpeg Ffmpeg 0.10.3
Ffmpeg Ffmpeg 2.3.3
Ffmpeg Ffmpeg 0.3.2
Ffmpeg Ffmpeg 2.2
Ffmpeg Ffmpeg 0.11.2
Ffmpeg Ffmpeg 0.8.6
Ffmpeg Ffmpeg 0.4.7
Ffmpeg Ffmpeg 0.6.1
Ffmpeg Ffmpeg 1.1.10
Ffmpeg Ffmpeg 2.0.4
Ffmpeg Ffmpeg 2.2.4
Ffmpeg Ffmpeg 0.3.3
Ffmpeg Ffmpeg 0.7.5
Ffmpeg Ffmpeg 1.1.2
Ffmpeg Ffmpeg 1.2.6
NA
CVE-2014-8546
Integer underflow in libavcodec/cinepak.c in FFmpeg prior to 2.4.2 allows remote malicious users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Cinepak video data.
Ffmpeg Ffmpeg 0.7.7
Ffmpeg Ffmpeg 0.7.1
Ffmpeg Ffmpeg 1.2.5
Ffmpeg Ffmpeg 2.3
Ffmpeg Ffmpeg 0.11.4
Ffmpeg Ffmpeg 0.7.6
Ffmpeg Ffmpeg 0.4.5
Ffmpeg Ffmpeg 0.10.3
Ffmpeg Ffmpeg 2.3.3
Ffmpeg Ffmpeg 0.3.2
Ffmpeg Ffmpeg 2.2
Ffmpeg Ffmpeg 0.11.2
Ffmpeg Ffmpeg 0.8.6
Ffmpeg Ffmpeg 0.4.7
Ffmpeg Ffmpeg 0.6.1
Ffmpeg Ffmpeg 1.1.10
Ffmpeg Ffmpeg 2.0.4
Ffmpeg Ffmpeg 2.2.4
Ffmpeg Ffmpeg 0.3.3
Ffmpeg Ffmpeg 0.7.5
Ffmpeg Ffmpeg 1.1.2
Ffmpeg Ffmpeg 1.2.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-35229
privilege escalation
local users
CVE-2024-5405
CVE-2024-27842
CVE-2024-5274
CVE-2024-5378
CVE-2024-34152
hard-coded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »