GCVE - cpe:2.3:a:ffmpeg:ffmpeg:6.1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ffmpeg:ffmpeg:6.1.1:*:*:*:*:*:*:*

part: a version: 6.1.1 update: *

Vendor	Ffmpeg (`4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f`)
Product	Ffmpeg (`69475a2d-e046-5b0f-b6da-299c42a85e87`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/ffmpeg`	purl2cpe	2026-06-01 10:12:29.449287
`pkg:deb/ubuntu/ffmpeg`	purl2cpe	2026-06-01 10:12:29.449288
`pkg:ffmpeg/ffmpeg`	purl2cpe	2026-06-01 10:12:29.449290
`pkg:github/ffmpeg/ffmpeg`	purl2cpe	2026-06-01 10:12:29.449291
`pkg:opensuse/ffmpeg`	purl2cpe	2026-06-01 10:12:29.449293

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-36619`	vulnerable	2026-06-08 06:39:45.553554	Details available FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service (DoS) condition. Published: 2024-11-29T00:00:00.000Z Updated: 2024-11-29T18:06:36.151Z Open on db.gcve.eu Reference links https://github.com/ffmpeg/ffmpeg/commit/28c7094b25b689185155a6833caf2747b94774a4 https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/wavarc.c#L651 https://gist.github.com/1047524396/fad68e8251f4e34a1bb838de697d5119	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-36618`	vulnerable	2026-06-08 06:39:45.553024	Details available FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. Published: 2024-11-29T00:00:00.000Z Updated: 2025-11-03T20:37:49.706Z Open on db.gcve.eu Reference links https://github.com/ffmpeg/ffmpeg/commit/7a089ed8e049e3bfcb22de1250b86f2106060857 https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/avidec.c#L1699 https://gist.github.com/1047524396/a148f3679415a6da53ca112eb2ba1523	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-36616`	vulnerable	2026-06-08 06:39:45.550648	Details available An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file. Published: 2024-11-29T00:00:00.000Z Updated: 2024-12-02T17:41:37.389Z Open on db.gcve.eu Reference links https://github.com/ffmpeg/ffmpeg/commit/86f73277bf014e2ce36dd2594f1e0fb8b3bd6661 https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/westwood_vqa.c#L265 https://gist.github.com/1047524396/ded3e1509d8296ec4a91817867d108e0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-36613`	vulnerable	2026-06-08 06:39:45.548594	Details available FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of-service (DoS) condition or other undefined behavior. Published: 2025-01-03T00:00:00.000Z Updated: 2025-01-03T20:46:39.235Z Open on db.gcve.eu Reference links https://github.com/ffmpeg/ffmpeg/commit/50d8e4f27398fd5778485a827d7a2817921f8540 https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/dxa.c#L125 https://gist.github.com/1047524396/0f4d90ef87553f772f888223085ac806	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35369`	vulnerable	2026-06-08 06:37:35.991035	Details available In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process. Published: 2024-11-29T00:00:00.000Z Updated: 2024-11-29T17:11:05.845Z Open on db.gcve.eu Reference links https://github.com/ffmpeg/ffmpeg/commit/0895ef0d6d6406ee6cd158fc4d47d80f201b8e9c https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/speexdec.c#L1423 https://gist.github.com/1047524396/455093807666f2e351d674750c8cd0b8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35367`	vulnerable	2026-06-08 06:37:35.988718	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35366`	vulnerable	2026-06-08 06:37:35.986494	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35365`	vulnerable	2026-06-08 06:37:35.985905	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.