GCVE - cpe:2.3:a:ffmpeg:libavcodec:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ffmpeg:libavcodec:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ffmpeg (`4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f`)
Product	Libavcodec (`a0f0e8ed-97ca-59ab-a901-5bd88279ac53`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/ffmpeg/ffmpeg`	purl2cpe	2026-06-01 10:12:29.689937
`pkg:github/ffmpeg/ffmpeg-coverity`	purl2cpe	2026-06-01 10:12:29.689939
`pkg:golang/github.com/ffmpeg/ffmpeg`	purl2cpe	2026-06-01 10:12:29.689941
`pkg:maven/net.bramp.ffmpeg/ffmpeg`	purl2cpe	2026-06-01 10:12:29.689942
`pkg:npm/%40ffmpeg/ffmpeg`	purl2cpe	2026-06-01 10:12:29.689943

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1931`	not_vulnerable	2026-06-08 04:58:03.023500	Details available sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in VideoLAN VLC media player 1.1.9 and earlier and other products, performs a write operation outside the bounds of an unspecified array, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a malformed AMV file. Published: 2011-07-07T21:00:00.000Z Updated: 2024-08-06T22:46:00.718Z Open on db.gcve.eu Reference links http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624339 http://www.securityfocus.com/archive/1/517706 http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=89f903b3d5ec38c9c5d90fba7e626fa0eda61a32 http://securityreason.com/securityalert/8299 http://www.securityfocus.com/bid/47602	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3429`	vulnerable	2026-06-08 04:55:14.449585	Details available flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted flic file, related to an "arbitrary offset dereference vulnerability." Published: 2010-09-30T14:00:00.000Z Updated: 2024-08-07T03:11:44.355Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2011:088 http://www.openwall.com/lists/oss-security/2010/09/28/4 http://git.ffmpeg.org/?p=ffmpeg%3Ba=commit%3Bh=16c592155f117ccd7b86006c45aacc692a81c23b http://www.mandriva.com/security/advisories?name=MDVSA-2011:061 http://www.mandriva.com/security/advisories?name=MDVSA-2011:062	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.