GCVE - cpe:2.3:a:ffmpeg:ffmpeg:2.2.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ffmpeg:ffmpeg:2.2.7:*:*:*:*:*:*:*

part: a version: 2.2.7 update: *

Vendor	Ffmpeg (`4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f`)
Product	Ffmpeg (`69475a2d-e046-5b0f-b6da-299c42a85e87`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/ffmpeg`	purl2cpe	2026-06-01 10:12:29.447571
`pkg:deb/ubuntu/ffmpeg`	purl2cpe	2026-06-01 10:12:29.447572
`pkg:ffmpeg/ffmpeg`	purl2cpe	2026-06-01 10:12:29.447573
`pkg:github/ffmpeg/ffmpeg`	purl2cpe	2026-06-01 10:12:29.447575
`pkg:opensuse/ffmpeg`	purl2cpe	2026-06-01 10:12:29.447577

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-1898`	vulnerable	2026-06-08 05:07:32.233952	Details available FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file. Published: 2016-01-15T02:00:00.000Z Updated: 2024-08-05T23:10:40.228Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html http://www.securitytracker.com/id/1034932 https://security.gentoo.org/glsa/201705-08 http://www.securityfocus.com/bid/80501 http://www.ubuntu.com/usn/USN-2944-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-1897`	vulnerable	2026-06-08 05:07:32.204046	Details available FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file. Published: 2016-01-15T02:00:00.000Z Updated: 2024-08-05T23:10:39.912Z Open on db.gcve.eu Reference links http://security.stackexchange.com/questions/110644 http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html http://www.securitytracker.com/id/1034932 https://security.gentoo.org/glsa/201705-08 http://www.securityfocus.com/bid/80501	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3395`	vulnerable	2026-06-08 05:06:38.179818	Details available The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, which triggers an out-of-bounds array access. Published: 2015-06-16T16:00:00.000Z Updated: 2024-08-06T05:47:57.389Z Open on db.gcve.eu Reference links https://git.libav.org/?p=libav.git%3Ba=blob%3Bf=Changelog%3Bhb=refs/tags/v11.4 https://security.gentoo.org/glsa/201705-08 http://www.ubuntu.com/usn/USN-2944-1 http://www.debian.org/security/2015/dsa-3288 http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=f7e1367f58263593e6cee3c282f7277d7ee9d553	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.