Approved changes feed: RSS · Atom

cpe:2.3:a:ffmpeg:ffmpeg:1.1.11:*:*:*:*:*:*:*

part: a version: 1.1.11 update: *

VendorFfmpeg (4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f)
ProductFfmpeg (69475a2d-e046-5b0f-b6da-299c42a85e87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ffmpeg purl2cpe 2026-06-01 10:12:29.447091
pkg:deb/ubuntu/ffmpeg purl2cpe 2026-06-01 10:12:29.447092
pkg:ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.447094
pkg:github/ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.447095
pkg:opensuse/ffmpeg purl2cpe 2026-06-01 10:12:29.447096

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8549 vulnerable 2026-06-08 05:06:09.182248 Details available
libavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted On2 data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8548 vulnerable 2026-06-08 05:06:09.179459 Details available
Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Quicktime Graphics (aka SMC) video data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8547 vulnerable 2026-06-08 05:06:09.176286 Details available
libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8546 vulnerable 2026-06-08 05:06:09.171462 Details available
Integer underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Cinepak video data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8545 vulnerable 2026-06-08 05:06:09.168835 Details available
libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted PNG data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8544 vulnerable 2026-06-08 05:06:09.166144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8543 vulnerable 2026-06-08 05:06:09.163581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8541 vulnerable 2026-06-08 05:06:09.146770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5272 vulnerable 2026-06-08 05:05:47.442783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5271 vulnerable 2026-06-08 05:05:47.411316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.