Skip to content
OpenAdvisories
Medium DSA-5748-1 2 CVEs

ffmpeg - security update

Published Aug 14, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 12 ffmpeg 7:5.1.6-0+deb12u1

Vulnerabilities 2

  • Medium 6.3
    CVE-2024-7055

    FFmpeg pnmdec.c pnm_decode_frame heap-based overflow

    A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack re…

    ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  • Medium 6.3
    CVE-2024-7272

    FFmpeg swresample.c fill_audiodata heap-based overflow

    A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill_audiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack r…

    ffmpeg Debian