FFmpeg 4.1
Approved changes feed: RSS · Atom
cpe:2.3:a:ffmpeg:ffmpeg:4.1:*:*:*:*:*:*:*
part: a version: 4.1 update: *
| Vendor | Ffmpeg (4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f) |
|---|---|
| Product | Ffmpeg (69475a2d-e046-5b0f-b6da-299c42a85e87) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448780 |
pkg:deb/ubuntu/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448781 |
pkg:ffmpeg/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448783 |
pkg:github/ffmpeg/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448784 |
pkg:opensuse/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448785 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-21041 |
vulnerable | 2026-06-08 05:22:30.658927 |
Details available
Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service
Published: 2021-05-24T17:31:03.000Z
Updated: 2024-08-04T14:22:25.473Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12284 |
vulnerable | 2026-06-08 05:17:56.830442 |
Details available
cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.
Published: 2020-04-28T05:16:43.000Z
Updated: 2024-08-04T11:48:58.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9721 |
vulnerable | 2026-06-08 05:14:26.143969 |
Details available
A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle_open_brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.
Published: 2019-03-12T06:00:00.000Z
Updated: 2024-08-04T22:01:53.919Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9718 |
vulnerable | 2026-06-08 05:14:26.142490 |
Details available
In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff_htmlmarkup_to_ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.
Published: 2019-03-12T06:00:00.000Z
Updated: 2024-08-04T22:01:53.269Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1000016 |
vulnerable | 2026-06-08 05:12:21.352465 |
Details available
FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in libavcodec/cbs_av1.c that can result in Denial of service. This attack appears to be exploitable via specially crafted AV1 file has to be provided as input. This vulnerability appears to have been fixed in after commit b97a4b658814b2de8b9f2a3bce491c002d34de31.
Published: 2019-02-04T21:00:00.000Z
Updated: 2024-08-05T03:00:19.428Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.