Skip to content
OpenAdvisories

Package · Debian

ffmpeg

442 known vulnerabilities.

8 results · Clear filters · Feed

  • High 8.8
    CVE-2026-8461 Public exploit

    Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

    An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution. This vulnerability is associated with the file libavcodec/magic…

  • High 7.2
    CVE-2025-9951 Public exploit

    Remote code execution via Heap Buffer Overflow in FFmpeg JPEG2000

    A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000.

  • Unscored —
    CVE-2017-9608 Public exploit

    The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2016-10191 Public exploit

    Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, an…

  • Unscored —
    CVE-2016-10190 Public exploit

    Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3…

  • Unscored —
    CVE-2009-4637 Public exploit EPSS 17%

    FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown…

  • Unscored —
    CVE-2008-4610 Public exploit

    MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demon…

  • Unscored —
    CVE-2008-3162 Public exploit

    Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remo…