Overview 525 matches · 1 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5
525matches
1in Waratek scope0.2%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
2public PoC0.4%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
1
0.2%
Outside Waratek scope
0
0.0%
Not applicable
524
99.8%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
525
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
2
0.4%
Proof of concept only
25
4.8%
Forecast only
0
0.0%
No public exploit
498
94.9%
split by
peak 78 / year
20051
Not applicable1
High1
not blocked1
No public exploit1
20061
Not applicable1
High1
not blocked1
No public exploit1
20070
20085
Not applicable5
High5
not blocked5
Working exploit published1
No public exploit4
20091
Not applicable1
High1
not blocked1
No public exploit1
201011
Not applicable11
High5
Medium6
not blocked11
Working exploit published1
No public exploit10
201113
Not applicable13
High4
Medium9
not blocked13
No public exploit13
201254
Not applicable54
High28
Medium25
Low1
not blocked54
No public exploit54
201378
Not applicable78
High41
Medium36
Low1
not blocked78
No public exploit78
201419
Not applicable19
High13
Medium6
not blocked19
No public exploit19
201529
Not applicable29
High20
Medium9
not blocked29
No public exploit29
201620
Not applicable20
High9
Medium11
not blocked20
No public exploit20
201747
Not applicable47
Critical16
High17
Medium14
not blocked47
No public exploit47
201830
Not applicable30
Critical1
High9
Medium20
not blocked30
No public exploit30
201911
Not applicable11
Critical3
High4
Medium4
not blocked11
No public exploit11
20204
Not applicable4
Critical1
High2
Medium1
not blocked4
No public exploit4
202166
Not applicable66
Critical2
High33
Medium31
not blocked66
No public exploit66
202230
Not applicable30
Critical2
High8
Medium20
not blocked30
No public exploit30
20237
No exploit published1
Not applicable6
Critical1
High3
Medium3
not blocked7
No public exploit7
202437
Not applicable37
Critical6
High17
Medium13
Low1
not blocked37
Proof of concept only13
No public exploit24
202519
Not applicable19
High9
Medium10
not blocked19
Proof of concept only10
No public exploit9
202642
Not applicable42
Critical1
High27
Medium14
not blocked42
Proof of concept only2
No public exploit40
20062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2021-28429 | Medium | 2023-08-11 | Not applicable | No public exploit | Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service (DoS) via crafted .mov file. |
| CVE-2020-36138 | High | 2023-08-11 | Not applicable | No public exploit | An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (DoS). |
| CVE-2023-39018 | Critical | 2023-07-28 | No exploit published | No public exploit | FFmpeg 0.7.0 and below was discovered to contain a code injection vulnerability in the component net.bramp.ffmpeg.FFmpeg.<constructor>. This vulnerability is exploited via passing an unchecked argument. NOTE: this is disputed by multiple third parties because there are no realistic use cases in which FFmpeg.java uses untrusted input for the path of the executable file. |
| CVE-2022-48434 | High | 2023-03-29 | Not applicable | No public exploit | libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used). |
| CVE-2022-3341 | Medium | 2023-01-12 | Not applicable | No public exploit | A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash. |
| CVE-2022-3109 | High | 2022-12-16 | Not applicable | No public exploit | An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability. |
| CVE-2022-3965 | High | 2022-11-13 | Not applicable | No public exploit | A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. The attack can be initiated remotely. The name of the patch is 13c13109759090b7f7182480d075e13b36ed8edd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213544. |
| CVE-2022-3964 | High | 2022-11-13 | Not applicable | No public exploit | A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. It is possible to initiate the attack remotely. The name of the patch is 92f9b28ed84a77138105475beba16c146bdaf984. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213543. |
| CVE-2022-2566 | Critical | 2022-09-23 | Not applicable | No public exploit | A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries in the loop and adds `sc->ctts_data[i].count` to `sc->sample_offsets_count`. This can lead to an integer overflow resulting in a small allocation with `av_calloc()`. An attacker can cause remote code execution via a malicious mp4 file. We recommend upgrading past commit c953baa084607dd1d84c3bfcce3cf6a87c3e6e05 |
| CVE-2020-28435 | Critical | 2022-07-25 | Not applicable | No public exploit | This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js. |
| CVE-2014-125025 | Medium | 2022-06-19 | Not applicable | No public exploit | A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function decode_pulses. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125024 | High | 2022-06-19 | Not applicable | No public exploit | A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function lag_decode_frame. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125023 | Medium | 2022-06-19 | Not applicable | No public exploit | A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function truemotion1_decode_header of the component Truemotion1 Handler. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125022 | Medium | 2022-06-19 | Not applicable | No public exploit | A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shorten_decode_frame of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125021 | Medium | 2022-06-19 | Not applicable | No public exploit | A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function cmv_process_header. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125020 | High | 2022-06-19 | Not applicable | No public exploit | A vulnerability has been found in FFmpeg 2.0 and classified as critical. This vulnerability affects the function decode_update_thread_context. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125019 | Medium | 2022-06-19 | Not applicable | No public exploit | A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_nal_unit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125018 | Medium | 2022-06-19 | Not applicable | No public exploit | A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function decode_slice_header. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125017 | High | 2022-06-18 | Not applicable | No public exploit | A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125016 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability was found in FFmpeg 2.0. It has been rated as problematic. This issue affects the function ff_init_buffer_info of the file utils.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125015 | High | 2022-06-18 | Not applicable | No public exploit | A vulnerability classified as critical has been found in FFmpeg 2.0. Affected is the function read_var_block_data. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125014 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125013 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrle_decode_frame of the file libavcodec/msrle.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125012 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the file libavcodec/dxtroy.c. The manipulation leads to integer coercion error. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125011 | High | 2022-06-18 | Not applicable | No public exploit | A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decode_frame of the file libavcodec/ansi.c. The manipulation leads to integer coercion error. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125010 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function decode_slice_header of the file libavcodec/h64.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125009 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function add_yblock of the file libavcodec/snow.h. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125008 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbis_header of the file libavformat/oggparsevorbis.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125007 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is the function intra_pred of the file libavcodec/hevcpred_template.c. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125006 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function output_frame of the file libavcodec/h264.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125005 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_vol_header of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125004 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability has been found in FFmpeg 2.0 and classified as problematic. This vulnerability affects the function decode_hextile of the file libavcodec/vmnc.c. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125003 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function get_siz of the file libavcodec/jpeg2000dec.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2014-125002 | Medium | 2022-06-18 | Not applicable | No public exploit | A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function dnxhd_init_rc of the file libavcodec/dnxhdenc.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. |
| CVE-2022-1475 | Medium | 2022-05-02 | Not applicable | No public exploit | An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file. |
| CVE-2020-23906 | Medium | 2021-11-10 | Not applicable | No public exploit | FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity. |
| CVE-2021-38094 | High | 2021-09-20 | Not applicable | No public exploit | Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
| CVE-2021-38093 | High | 2021-09-20 | Not applicable | No public exploit | Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
| CVE-2021-38092 | High | 2021-09-20 | Not applicable | No public exploit | Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
| CVE-2021-38091 | High | 2021-09-20 | Not applicable | No public exploit | Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
| CVE-2021-38090 | High | 2021-09-20 | Not applicable | No public exploit | Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
| CVE-2020-20902 | Medium | 2021-09-20 | Not applicable | No public exploit | A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that could result in disclosure of information. |
| CVE-2020-20898 | High | 2021-09-20 | Not applicable | No public exploit | Integer Overflow vulnerability in function filter16_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
| CVE-2020-20896 | High | 2021-09-20 | Not applicable | No public exploit | An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference. |
| CVE-2020-20892 | High | 2021-09-20 | Not applicable | No public exploit | An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero. |
| CVE-2020-20891 | High | 2021-09-20 | Not applicable | No public exploit | Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. |
| CVE-2021-38171 | Critical | 2021-08-21 | Not applicable | No public exploit | adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a necessary step because the second argument to init_get_bits can be crafted. |
| CVE-2021-38291 | High | 2021-08-12 | Not applicable | No public exploit | FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion failure at src/libavutil/mathematics.c. |
| CVE-2020-21697 | Medium | 2021-08-10 | Not applicable | No public exploit | A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file. |
| CVE-2020-21688 | High | 2021-08-10 | Not applicable | No public exploit | A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code. |
| CVE-2021-3566 | Medium | 2021-08-05 | Not applicable | No public exploit | Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim (as long as the `-vcodec copy` option is passed to ffmpeg). |
| CVE-2021-38114 | Medium | 2021-08-04 | Not applicable | No public exploit | libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868. |
| CVE-2021-33815 | High | 2021-06-03 | Not applicable | No public exploit | dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly checked. |
| CVE-2020-22056 | Medium | 2021-06-02 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c. |
| CVE-2020-22054 | Medium | 2021-06-02 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c. |
| CVE-2020-22051 | Medium | 2021-06-02 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c. |
| CVE-2020-22049 | Medium | 2021-06-02 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c. |
| CVE-2020-22048 | Medium | 2021-06-02 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c. |
| CVE-2020-22046 | Medium | 2021-06-02 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c. |
| CVE-2020-22044 | Medium | 2021-06-01 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c. |
| CVE-2020-22043 | Medium | 2021-06-01 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c. |
| CVE-2020-22042 | Medium | 2021-06-01 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graphparser.c. |
| CVE-2020-22041 | Medium | 2021-06-01 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc. |
| CVE-2020-22040 | Medium | 2021-06-01 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c. |
| CVE-2020-22039 | Medium | 2021-06-01 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function. |
| CVE-2020-22038 | Medium | 2021-06-01 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c. |
| CVE-2020-22037 | Medium | 2021-06-01 | Not applicable | No public exploit | A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c. |
| CVE-2020-22036 | High | 2021-06-01 | Not applicable | No public exploit | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might lead to memory corruption and other potential consequences. |
| CVE-2020-22035 | High | 2021-06-01 | Not applicable | No public exploit | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might lead to memory corruption and other potential consequences. |
| CVE-2020-22034 | High | 2021-05-27 | Not applicable | No public exploit | A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory corruption and other potential consequences. |
| CVE-2020-22033 | Medium | 2021-05-27 | Not applicable | No public exploit | A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, which could let a remote malicious user cause a Denial of Service. |
| CVE-2020-22032 | High | 2021-05-27 | Not applicable | No public exploit | A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which might lead to memory corruption and other potential consequences. |
| CVE-2020-22031 | High | 2021-05-27 | Not applicable | No public exploit | A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, which might lead to memory corruption and other potential consequences. |
| CVE-2020-22030 | High | 2021-05-27 | Not applicable | No public exploit | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, which might lead to memory corruption and other potential consequences. |
| CVE-2020-22029 | High | 2021-05-27 | Not applicable | No public exploit | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, which might lead to memory corruption and other potential consequences. |
| CVE-2020-22027 | High | 2021-05-27 | Not applicable | No public exploit | A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might lead to memory corruption and other potential consequences. |
| CVE-2020-22025 | High | 2021-05-27 | Not applicable | No public exploit | A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to memory corruption and other potential consequences. |
| CVE-2020-22023 | High | 2021-05-27 | Not applicable | No public exploit | A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, which might lead to memory corruption and other potential consequences. |
| CVE-2020-22022 | High | 2021-05-27 | Not applicable | No public exploit | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which might lead to memory corruption and other potential consequences. |
| CVE-2020-22017 | High | 2021-05-27 | Not applicable | No public exploit | A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences. |
| CVE-2020-22016 | High | 2021-05-27 | Not applicable | No public exploit | A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might lead to memory corruption and other potential consequences. |
| CVE-2020-24020 | High | 2021-05-26 | Not applicable | No public exploit | Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code. |
| CVE-2020-22028 | Medium | 2021-05-26 | Not applicable | No public exploit | Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service. |
| CVE-2020-22026 | Medium | 2021-05-26 | Not applicable | No public exploit | Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a Denial of Service. |
| CVE-2020-22024 | Medium | 2021-05-26 | Not applicable | No public exploit | Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of Service. |
| CVE-2020-22021 | Medium | 2021-05-26 | Not applicable | No public exploit | Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Service. |
| CVE-2020-22020 | Medium | 2021-05-26 | Not applicable | No public exploit | Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Denial of Service. |
| CVE-2020-22019 | Medium | 2021-05-26 | Not applicable | No public exploit | Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Service. |
| CVE-2020-22015 | High | 2021-05-26 | Not applicable | No public exploit | Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code. |
| CVE-2020-20453 | Medium | 2021-05-25 | Not applicable | No public exploit | FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service |
| CVE-2020-20451 | High | 2021-05-25 | Not applicable | No public exploit | Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c. |
| CVE-2020-20450 | High | 2021-05-25 | Not applicable | No public exploit | FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service. |
| CVE-2020-20448 | Medium | 2021-05-25 | Not applicable | No public exploit | FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service. |
| CVE-2020-20446 | Medium | 2021-05-25 | Not applicable | No public exploit | FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause a Denial of Service. |
| CVE-2020-20445 | Medium | 2021-05-25 | Not applicable | No public exploit | FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service. |
| CVE-2020-21041 | High | 2021-05-24 | Not applicable | No public exploit | Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service |
| CVE-2021-23376 | Critical | 2021-04-18 | Not applicable | No public exploit | This affects all versions of package ffmpegdotjs. If attacker-controlled user input is given to the trimvideo function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization. |
| CVE-2021-30123 | High | 2021-04-07 | Not applicable | No public exploit | FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution. |
| CVE-2020-24995 | High | 2021-03-30 | Not applicable | No public exploit | Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local). |
| CVE-2020-35965 | High | 2021-01-04 | Not applicable | No public exploit | decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations. |