p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости ffmpeg · Страница 2

За последние 30 дней в ffmpeg опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 43

  1. CVE-2020-22023

    Высокий · CVSS 8.8EPSS 1,46%Есть исправление

    CVE-2020-22023

    A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, which might lead to memory corruption and other potential consequences.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  2. CVE-2020-22025

    Высокий · CVSS 8.8EPSS 1,84%Есть исправление

    CVE-2020-22025

    A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to memory corruption and other potential consequences.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  3. CVE-2020-22027

    Высокий · CVSS 8.8EPSS 1,53%Есть исправление

    CVE-2020-22027

    A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might lead to memory corruption and other potential consequences.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  4. CVE-2020-22030

    Высокий · CVSS 8.8EPSS 1,18%Есть исправление

    CVE-2020-22030

    A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, which might lead to memory corruption and other potential consequences.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  5. CVE-2020-22029

    Высокий · CVSS 8.8EPSS 1,49%Есть исправление

    CVE-2020-22029

    A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, which might lead to memory corruption and other potential consequences.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  6. CVE-2020-22031

    Высокий · CVSS 8.8EPSS 1,69%Есть исправление

    CVE-2020-22031

    A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, which might lead to memory corruption and other potential consequences.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  7. CVE-2020-22028

    Средний · CVSS 6.5EPSS 1,71%Есть исправление

    CVE-2020-22028

    Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  8. CVE-2020-22026

    Средний · CVSS 6.5EPSS 1,37%Есть исправление

    CVE-2020-22026

    Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a Denial of Service.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  9. CVE-2020-22021

    Средний · CVSS 6.5EPSS 1,68%Есть исправление

    CVE-2020-22021

    Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Service.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  10. CVE-2020-22019

    Средний · CVSS 6.5EPSS 1,09%Есть исправление

    CVE-2020-22019

    Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Service.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  11. CVE-2020-22020

    Средний · CVSS 6.5EPSS 1,52%Есть исправление

    CVE-2020-22020

    Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Denial of Service.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  12. CVE-2020-22015

    Высокий · CVSS 8.8EPSS 3,57%Есть исправление

    CVE-2020-22015

    Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  13. CVE-2020-20453

    Средний · CVSS 6.5EPSS 1,78%Есть исправление

    CVE-2020-20453

    FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  14. CVE-2020-20450

    Высокий · CVSS 7.5EPSS 1,08%Есть исправление

    CVE-2020-20450

    FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  15. CVE-2020-20446

    Средний · CVSS 6.5EPSS 1,73%Есть исправление

    CVE-2020-20446

    FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause a Denial of Service.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  16. CVE-2020-20445

    Средний · CVSS 6.5EPSS 1,65%Есть исправление

    CVE-2020-20445

    FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  17. CVE-2020-21041

    Высокий · CVSS 7.5EPSS 2,07%Есть исправление

    CVE-2020-21041

    Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service

    • Обновитесь до 7:4.2.7-0ubuntu0.1
  18. CVE-2020-35965

    Высокий · CVSS 7.5EPSS 2,31%Есть исправление

    CVE-2020-35965

    decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
    Опубликовано Обновлено
  19. CVE-2020-35964

    Средний · CVSS 6.5EPSS 1,54%Есть исправление

    CVE-2020-35964

    track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing.

    • Обновитесь до 7:4.2.7-0ubuntu0.1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →