GCVE - cpe:2.3:a:ffmpeg:ffmpeg:2.0.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ffmpeg:ffmpeg:2.0.4:*:*:*:*:*:*:*

part: a version: 2.0.4 update: *

Vendor	Ffmpeg (`4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f`)
Product	Ffmpeg (`69475a2d-e046-5b0f-b6da-299c42a85e87`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/ffmpeg`	purl2cpe	2026-06-01 10:12:29.447366
`pkg:deb/ubuntu/ffmpeg`	purl2cpe	2026-06-01 10:12:29.447367
`pkg:ffmpeg/ffmpeg`	purl2cpe	2026-06-01 10:12:29.447368
`pkg:github/ffmpeg/ffmpeg`	purl2cpe	2026-06-01 10:12:29.447370
`pkg:opensuse/ffmpeg`	purl2cpe	2026-06-01 10:12:29.447371

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-1898`	vulnerable	2026-06-08 05:07:32.233628	Details available FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file. Published: 2016-01-15T02:00:00.000Z Updated: 2024-08-05T23:10:40.228Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html http://www.securitytracker.com/id/1034932 https://security.gentoo.org/glsa/201705-08 http://www.securityfocus.com/bid/80501 http://www.ubuntu.com/usn/USN-2944-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-1897`	vulnerable	2026-06-08 05:07:32.193699	Details available FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file. Published: 2016-01-15T02:00:00.000Z Updated: 2024-08-05T23:10:39.912Z Open on db.gcve.eu Reference links http://security.stackexchange.com/questions/110644 http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html http://www.securitytracker.com/id/1034932 https://security.gentoo.org/glsa/201705-08 http://www.securityfocus.com/bid/80501	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8549`	vulnerable	2026-06-08 05:06:09.182749	Details available libavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted On2 data. Published: 2014-11-05T11:00:00.000Z Updated: 2024-08-06T13:18:48.577Z Open on db.gcve.eu Reference links http://www.ffmpeg.org/security.html https://security.gentoo.org/glsa/201603-06 http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=550f3e9df3410b3dd975e590042c0d83e20a8da3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8548`	vulnerable	2026-06-08 05:06:09.179686	Details available Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Quicktime Graphics (aka SMC) video data. Published: 2014-11-05T11:00:00.000Z Updated: 2024-08-06T13:18:48.578Z Open on db.gcve.eu Reference links http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=c727401aa9d62335e89d118a5b4e202edf39d905 http://www.ubuntu.com/usn/USN-2534-1 http://www.ffmpeg.org/security.html https://security.gentoo.org/glsa/201603-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8547`	vulnerable	2026-06-08 05:06:09.177054	Details available libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data. Published: 2014-11-05T11:00:00.000Z Updated: 2024-08-06T13:18:48.590Z Open on db.gcve.eu Reference links http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=8f1457864be8fb9653643519dea1c6492f1dde57 http://www.ubuntu.com/usn/USN-2534-1 http://www.ffmpeg.org/security.html https://security.gentoo.org/glsa/201603-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8546`	vulnerable	2026-06-08 05:06:09.171682	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8545`	vulnerable	2026-06-08 05:06:09.169102	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8544`	vulnerable	2026-06-08 05:06:09.166385	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8543`	vulnerable	2026-06-08 05:06:09.163811	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8541`	vulnerable	2026-06-08 05:06:09.153965	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5272`	vulnerable	2026-06-08 05:05:47.442993	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5271`	vulnerable	2026-06-08 05:05:47.417903	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.