ffmpeg: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 9

• Critical 9.8
  CVE-2024-35368

  FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c.

  ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  Nov 29, 2024
• Critical 9.1
  CVE-2024-35366

  FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavf…

  ffmpeg ffmpeg libav Debian Ubuntu
  Nov 29, 2024
• Critical 9.1
  CVE-2024-35367

  FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer

  ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  Nov 29, 2024
• Medium 6.5
  CVE-2024-36616

  An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of…

  ffmpeg ffmpeg libav Debian Ubuntu
  Nov 29, 2024
• Medium 6.2
  CVE-2024-36617

  FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.

  ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  Nov 29, 2024
• Medium 6.2
  CVE-2024-36618

  FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, p…

  ffmpeg ffmpeg libav Debian Ubuntu
  Nov 29, 2024
• Medium 5.9
  CVE-2024-36615

  FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding par…

  ffmpeg libav Debian Ubuntu
  Nov 29, 2024
• Medium 5.5
  CVE-2024-35369

  In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists …

  ffmpeg libav Debian Ubuntu
  Nov 29, 2024
• Medium 5.3
  CVE-2024-36619

  FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow …

  ffmpeg ffmpeg libav Debian Ubuntu
  Nov 29, 2024

Revision history

1. 2026-11-12 #22

   Neue Updates von SUSE aufgenommen

2. 2026-10-19 #21

   Neue Updates von openSUSE aufgenommen

3. 2026-09-24 #20

   Neue Updates von openSUSE aufgenommen

4. 2026-09-06 #19

   Neue Updates von openSUSE aufgenommen

5. 2026-07-02 #18

   Neue Updates von openSUSE aufgenommen

6. 2026-06-18 #17

   Neue Updates von SUSE aufgenommen

7. 2026-06-02 #16

   Neue Updates von openSUSE aufgenommen

8. 2026-05-28 #15

   Neue Updates von openSUSE und Ubuntu aufgenommen

9. 2026-01-18 #14

   Neue Updates von Debian aufgenommen

10. 2025-10-15 #13

    Neue Updates von Ubuntu aufgenommen

11. 2025-08-25 #12

    Neue Updates von Debian und SUSE aufgenommen

12. 2025-07-20 #11

    Neue Updates von SUSE aufgenommen

13. 2025-07-17 #10

    Neue Updates von SUSE aufgenommen

14. 2025-06-01 #9

    Neue Updates von openSUSE aufgenommen

15. 2025-05-04 #8

    Neue Updates von SUSE aufgenommen

16. 2025-04-21 #7

    Neue Updates von openSUSE aufgenommen

17. 2025-04-03 #6

    Neue Updates von SUSE aufgenommen

18. 2025-03-16 #5

    Neue Updates von SUSE aufgenommen

19. 2025-03-03 #4

    Neue Updates von openSUSE aufgenommen

20. 2025-02-02 #3

    Neue Updates von Debian aufgenommen

21. 2025-01-07 #2

    Neue Updates von Ubuntu aufgenommen

22. 2024-12-01 #1

    Initiale Fassung

References

• GitHub Advisory Database vom 2024-12-01
  https://github.com/advisories/GHSA-c655-qv2v-73rm
• Ubuntu Security Notice USN-7188-1 vom 2025-01-08
  https://ubuntu.com/security/notices/USN-7188-1
• Debian Security Advisory DLA-4039 vom 2025-02-01
  https://lists.debian.org/debian-lts-announce/2025/02/msg00000.html
• openSUSE Security Update OPENSUSE-SU-2025:14850-1 vom 2025-03-03
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZB33CK26BY2QPYGREWH7HHWHPSLGY4DI/
• SUSE Security Update SUSE-SU-2025:0862-1 vom 2025-03-14
  https://lists.suse.com/pipermail/sle-security-updates/2025-March/020516.html
• SUSE Security Update SUSE-SU-2025:1128-1 vom 2025-04-03
  https://lists.suse.com/pipermail/sle-security-updates/2025-April/020649.html
• SUSE Security Update SUSE-SU-2025:1128-1 vom 2025-04-03
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/BUTZTVXUCY5PWI25OBULIPCCLGEGSU7X/
• SUSE Security Update SUSE-SU-2025:1128-1 vom 2025-04-03
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BUTZTVXUCY5PWI25OBULIPCCLGEGSU7X/
• openSUSE Security Update OPENSUSE-SU-2025:15010-1 vom 2025-04-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VRV2HFFHZK4M5WT2N2QVH4SDEORPP6SK/
• SUSE Security Update SUSE-SU-2025:1450-1 vom 2025-05-05
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/E5C3GC7VTUMYO4WCWZXPMHKMIVO4WJ3W/
• openSUSE Security Update OPENSUSE-SU-2025:15177-1 vom 2025-05-31
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/H2PRVBAR3CBT6GKTR4CK3DX6YQQ2NP5D/
• SUSE Security Update SUSE-SU-2025:02352-1 vom 2025-07-17
  https://lists.suse.com/pipermail/sle-security-updates/2025-July/021847.html
• SUSE Security Update SUSE-SU-2025:02381-1 vom 2025-07-18
  https://lists.suse.com/pipermail/sle-security-updates/2025-July/021852.html
• Debian Security Advisory DSA-5985 vom 2025-08-25
  https://lists.debian.org/debian-security-announce/2025/msg00149.html
• SUSE Security Update SUSE-SU-2025:02972-1 vom 2025-08-25
  https://lists.suse.com/pipermail/sle-security-updates/2025-August/022264.html
• Ubuntu Security Notice USN-7823-1 vom 2025-10-16
  https://ubuntu.com/security/notices/USN-7823-1
• Debian Security Advisory DLA-4440 vom 2026-01-17
  https://lists.debian.org/debian-lts-announce/2026/01/msg00011.html
• openSUSE Security Update OPENSUSE-SU-2026:10866-1 vom 2026-05-28
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XSCJKF66LTONP72VM5TT4DGXICKOBAGB/
• Ubuntu Security Notice USN-8329-1 vom 2026-05-28
  https://ubuntu.com/security/notices/USN-8329-1
• openSUSE Security Update OPENSUSE-SU-2026:10867-1 vom 2026-05-28
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L2TVHM7XOAV45JHZ254UZQQMDW55RPUM/
• openSUSE Security Update OPENSUSE-SU-2026:20855-1 vom 2026-06-02
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F5ETIVB5ZYRWKNJ2IY22K7D5OHJI3VXV/
• SUSE Security Update SUSE-SU-2026:2444-1 vom 2026-06-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026826.html
• SUSE Security Update SUSE-SU-2026:2445-1 vom 2026-06-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026825.html
• openSUSE Security Update OPENSUSE-SU-2026:21211-1 vom 2026-07-03
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E7NK5PO4G22FOCR2YYC4C52SNASK2SLP/
• openSUSE Security Update OPENSUSE-SU-2026:11665-1 vom 2026-09-04
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/36MFOOZUWA23VQEN5YTRKBQNH32RPWZB/
• openSUSE Security Update OPENSUSE-SU-2026:21877-1 vom 2026-09-24
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YCZ527MEYRWJNHD542WIO4GLKVXTS2FF/
• openSUSE Security Update OPENSUSE-SU-2026:12064-1 vom 2026-10-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/K4WDLCM7F7WFXG7GMIL5NCVTZ36AZEU3/
• SUSE Security Update SUSE-SU-2026:5220-1 vom 2026-11-12
  https://lists.suse.com/pipermail/sle-security-updates/2026-November/030634.html