Approved changes feed: RSS · Atom
cpe:2.3:a:libav:libav:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Libav (813c8cbe-675d-5850-8eef-95f346ccf92f) |
|---|---|
| Product | Libav (5622b9ed-3e75-5407-8971-c668b118732d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libav-tools |
purl2cpe | 2026-06-01 10:14:37.827703 |
pkg:github/libav/libav |
purl2cpe | 2026-06-01 10:14:37.827706 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8586 |
vulnerable | 2026-06-08 07:45:20.772509 |
libav MPEG File Parser utils.c ff_seek_frame_binary null pointer dereference
LOW (3.3)
A vulnerability, which was classified as problematic, was found in libav up to 12.3. This affects the function ff_seek_frame_binary of the file /libavformat/utils.c of the component MPEG File Parser. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-08-05T17:32:05.219Z
Updated: 2025-08-06T15:10:03.799Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8585 |
vulnerable | 2026-06-08 07:45:20.772103 |
libav DSS File Demuxer avconv.c main double free
MEDIUM (5.3)
A vulnerability, which was classified as critical, has been found in libav up to 12.3. Affected by this issue is the function main of the file /avtools/avconv.c of the component DSS File Demuxer. The manipulation leads to double free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-08-05T17:02:06.134Z
Updated: 2025-08-06T15:09:05.365Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8584 |
vulnerable | 2026-06-08 07:45:20.771486 |
libav AVI File Parser buffer.c av_buffer_unref null pointer dereference
LOW (3.3)
A vulnerability classified as problematic was found in libav up to 12.3. Affected by this vulnerability is the function av_buffer_unref of the file libavutil/buffer.c of the component AVI File Parser. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The bug was initially reported by the researcher to the wrong project. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-08-05T16:32:06.484Z
Updated: 2025-08-05T17:53:41.456Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9720 |
vulnerable | 2026-06-08 05:14:26.143473 |
Details available
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf.
Published: 2019-09-19T20:37:41.000Z
Updated: 2024-08-04T22:01:53.944Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9719 |
vulnerable | 2026-06-08 05:14:26.143031 |
Details available
A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because srt_to_ass in libavcodec/srtdec.c misuses snprintf. NOTE: Third parties dispute that this is a vulnerability because “no evidence of a vulnerability is provided” and only “a generic warning from a static code analysis” is provided
Published: 2019-09-19T20:32:34.000Z
Updated: 2024-08-04T22:01:53.265Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9717 |
vulnerable | 2026-06-08 05:14:26.139940 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5766 |
vulnerable | 2026-06-08 05:11:51.918809 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5684 |
vulnerable | 2026-06-08 05:11:51.593813 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9051 |
vulnerable | 2026-06-08 05:10:09.294635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16803 |
vulnerable | 2026-06-08 05:09:01.080975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8676 |
vulnerable | 2026-06-08 05:08:14.609602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8675 |
vulnerable | 2026-06-08 05:08:14.609197 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7424 |
vulnerable | 2026-06-08 05:08:12.347990 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7393 |
vulnerable | 2026-06-08 05:08:12.269802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6832 |
vulnerable | 2026-06-08 05:08:11.168004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3062 |
vulnerable | 2026-06-08 05:07:44.228531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5479 |
vulnerable | 2026-06-08 05:06:50.113752 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3395 |
vulnerable | 2026-06-08 05:06:38.193082 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5271 |
vulnerable | 2026-06-08 05:05:47.423511 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4609 |
vulnerable | 2026-06-08 05:05:45.168937 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3984 |
vulnerable | 2026-06-08 05:05:43.767455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3362 |
vulnerable | 2026-06-08 04:59:24.890765 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1931 |
vulnerable | 2026-06-08 04:58:03.034063 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.