Approved changes feed: RSS · Atom

cpe:2.3:a:ffmpeg:ffmpeg:1.2.4:*:*:*:*:*:*:*

part: a version: 1.2.4 update: *

VendorFfmpeg (4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f)
ProductFfmpeg (69475a2d-e046-5b0f-b6da-299c42a85e87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ffmpeg purl2cpe 2026-06-01 10:12:29.447271
pkg:deb/ubuntu/ffmpeg purl2cpe 2026-06-01 10:12:29.447273
pkg:ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.447274
pkg:github/ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.447275
pkg:opensuse/ffmpeg purl2cpe 2026-06-01 10:12:29.447277

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8549 vulnerable 2026-06-08 05:06:09.182346 Details available
libavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted On2 data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8548 vulnerable 2026-06-08 05:06:09.179554 Details available
Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Quicktime Graphics (aka SMC) video data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8547 vulnerable 2026-06-08 05:06:09.176478 Details available
libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8546 vulnerable 2026-06-08 05:06:09.171556 Details available
Integer underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Cinepak video data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8545 vulnerable 2026-06-08 05:06:09.168935 Details available
libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted PNG data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8544 vulnerable 2026-06-08 05:06:09.166248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8543 vulnerable 2026-06-08 05:06:09.163682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8541 vulnerable 2026-06-08 05:06:09.149847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5272 vulnerable 2026-06-08 05:05:47.442864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5271 vulnerable 2026-06-08 05:05:47.413825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.