Approved changes feed: RSS · Atom

cpe:2.3:a:ffmpeg:ffmpeg:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

VendorFfmpeg (4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f)
ProductFfmpeg (69475a2d-e046-5b0f-b6da-299c42a85e87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ffmpeg purl2cpe 2026-06-01 10:12:29.449348
pkg:deb/ubuntu/ffmpeg purl2cpe 2026-06-01 10:12:29.449349
pkg:ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.449351
pkg:github/ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.449352
pkg:opensuse/ffmpeg purl2cpe 2026-06-01 10:12:29.449353

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-22921 vulnerable 2026-06-08 07:10:54.989981 Details available
FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c.
Published: 2025-02-18T00:00:00.000Z
Updated: 2025-11-03T21:00:12.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36615 vulnerable 2026-06-08 06:39:45.550085 Details available
FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This could lead to a data race if video encoding parameters were being exported, as the side data would be attached in the decoder thread while being read in the output thread.
Published: 2024-11-29T00:00:00.000Z
Updated: 2024-12-03T15:24:20.233Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35368 vulnerable 2026-06-08 06:37:35.990566 Details available
FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c.
Published: 2024-11-29T00:00:00.000Z
Updated: 2025-11-03T20:37:35.749Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32230 vulnerable 2026-06-08 06:35:32.995402 Details available
FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0
Published: 2024-07-01T00:00:00.000Z
Updated: 2025-03-14T16:24:43.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32229 vulnerable 2026-06-08 06:35:32.995013 Details available
FFmpeg 7.0 contains a heap-buffer-overflow at libavfilter/vf_tiltandshift.c:189:5 in copy_column.
Published: 2024-07-01T00:00:00.000Z
Updated: 2024-08-02T02:06:44.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32228 vulnerable 2026-06-08 06:35:32.994595 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51798 vulnerable 2026-06-08 06:17:54.031197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51797 vulnerable 2026-06-08 06:17:54.029564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51796 vulnerable 2026-06-08 06:17:54.028059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51795 vulnerable 2026-06-08 06:17:54.019999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51794 vulnerable 2026-06-08 06:17:54.018653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51793 vulnerable 2026-06-08 06:17:54.013713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51791 vulnerable 2026-06-08 06:17:53.998387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.