Unscored DLA-1654-1 6 CVEs

libav - security update

Published Jan 31, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	libav	6:11.12-1~deb8u5

Vulnerabilities 6

Unscored —

CVE-2014-8542

libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote…

ffmpeg libav Debian Ubuntu

Nov 5, 2014
Unscored —

CVE-2015-1207

Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause …

oxide-qt ffmpeg Debian Ubuntu

Jun 6, 2017
Unscored —

CVE-2017-14169

In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, an integer signedness error might …

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

Sep 7, 2017
Unscored —

CVE-2017-14223

In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check …

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

Sep 9, 2017
Unscored —

CVE-2017-7863

FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_…

ffmpeg Debian

Apr 14, 2017
Unscored —

CVE-2017-7865

FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decod…

ffmpeg ffmpeg libav Debian Ubuntu

Apr 14, 2017