Skip to content
OpenAdvisories
Unscored DLA-644-1 3 CVEs

libav - security update

Published Oct 4, 2016 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 libav 6:0.8.18-0+deb7u1

Vulnerabilities 3

  • Unscored —

    The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of compon…

  • Unscored —

    The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a deni…

  • Unscored —

    Stack-based buffer overflow in the aac_sync function in aac_parser.c in Libav before 11.5 allows remote attackers to ca…