Vulnerabilities (CVE)

Filtered by vendor Ffmpeg Subscribe
Total 482 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-0851 1 Ffmpeg 1 Ffmpeg 2026-06-16 9.3 HIGH N/A
The decode_frame function in libavcodec/eamad.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted Electronic Arts Madcow video data, which triggers an out-of-bounds array access.
CVE-2013-0850 1 Ffmpeg 1 Ffmpeg 2026-06-16 9.3 HIGH N/A
The decode_slice_header function in libavcodec/h264.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted H.264 data, which triggers an out-of-bounds array access.
CVE-2013-0849 1 Ffmpeg 1 Ffmpeg 2026-06-16 9.3 HIGH N/A
The roq_decode_init function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted (1) width or (2) height dimension that is not a multiple of sixteen in id RoQ video data.
CVE-2013-0848 1 Ffmpeg 1 Ffmpeg 2026-06-16 9.3 HIGH N/A
The decode_init function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access.
CVE-2013-0847 1 Ffmpeg 1 Ffmpeg 2026-06-16 9.3 HIGH N/A
The ff_id3v2_parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an out-of-bounds array access.
CVE-2013-0846 1 Ffmpeg 1 Ffmpeg 2026-06-16 9.3 HIGH N/A
Array index error in the qdm2_decode_super_block function in libavcodec/qdm2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted QDM2 data, which triggers an out-of-bounds array access.
CVE-2013-0845 1 Ffmpeg 1 Ffmpeg 2026-06-16 9.3 HIGH N/A
libavcodec/alsdec.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via a crafted block length, which triggers an out-of-bounds write.
CVE-2013-0844 1 Ffmpeg 1 Ffmpeg 2026-06-16 9.3 HIGH N/A
Off-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4 allows remote attackers to have an unspecified impact via crafted DK4 data, which triggers an out-of-bounds array access.
CVE-2012-6618 1 Ffmpeg 1 Ffmpeg 2026-06-16 2.6 LOW N/A
The av_probe_input_buffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a denial of service (crash) via a crafted MP3 file, possibly related to frame size or lack of sufficient "frames to estimate rate."
CVE-2012-6617 1 Ffmpeg 1 Ffmpeg 2026-06-16 4.3 MEDIUM N/A
The prepare_sdp_description function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (crash) via vectors related to the rtp format.
CVE-2012-6616 1 Ffmpeg 1 Ffmpeg 2026-06-16 5.0 MEDIUM N/A
The mov_text_decode_frame function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via crafted 3GPP TS 26.245 data.
CVE-2012-6615 1 Ffmpeg 1 Ffmpeg 2026-06-16 4.3 MEDIUM N/A
The ff_ass_split_override_codes function in libavcodec/ass_split.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a subtitle dialog without text.
CVE-2012-5361 1 Ffmpeg 1 Ffmpeg 2026-06-16 6.8 MEDIUM 7.8 HIGH
Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file.
CVE-2012-5360 1 Ffmpeg 1 Ffmpeg 2026-06-16 9.3 HIGH 8.8 HIGH
Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file.
CVE-2012-5359 1 Ffmpeg 1 Ffmpeg 2026-06-16 9.3 HIGH 8.8 HIGH
Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file.
CVE-2012-2805 1 Ffmpeg 1 Ffmpeg 2026-06-16 5.0 MEDIUM 7.5 HIGH
Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service.
CVE-2012-2804 2 Ffmpeg, Libav 2 Ffmpeg, Libav 2026-06-16 10.0 HIGH N/A
Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors, related to "reallocation code" and the luma height and width.
CVE-2012-2803 2 Ffmpeg, Libav 2 Ffmpeg, Libav 2026-06-16 10.0 HIGH N/A
Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting the data size value.
CVE-2012-2802 2 Ffmpeg, Libav 2 Ffmpeg, Libav 2026-06-16 10.0 HIGH N/A
Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "number of output channels" and "out of array writes."
CVE-2012-2801 2 Ffmpeg, Libav 2 Ffmpeg, Libav 2026-06-16 10.0 HIGH N/A
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes."