Approved changes feed: RSS · Atom

cpe:2.3:a:libav:libav:12.3:*:*:*:*:*:*:*

part: a version: 12.3 update: *

VendorLibav (813c8cbe-675d-5850-8eef-95f346ccf92f)
ProductLibav (5622b9ed-3e75-5407-8971-c668b118732d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libav-tools purl2cpe 2026-06-01 10:14:37.827989
pkg:github/libav/libav purl2cpe 2026-06-01 10:14:37.827991

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-18778 vulnerable 2026-06-08 05:20:57.094157 Details available
In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_p_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file.
Published: 2021-08-23T21:50:04.000Z
Updated: 2024-08-04T14:08:30.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18776 vulnerable 2026-06-08 05:20:57.093821 Details available
In Libav 12.3, there is a segmentation fault in vc1_decode_b_mb_intfr in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file.
Published: 2021-08-23T21:50:04.000Z
Updated: 2024-08-04T14:08:30.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18775 vulnerable 2026-06-08 05:20:57.093424 Details available
In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_b_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file.
Published: 2021-08-23T21:50:03.000Z
Updated: 2024-08-04T14:08:30.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14443 vulnerable 2026-06-08 05:12:54.856307 Details available
An issue was discovered in Libav 12.3. Division by zero in range_decode_culshift in libavcodec/apedec.c allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv.
Published: 2019-07-30T12:05:49.000Z
Updated: 2024-08-05T00:19:40.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14442 vulnerable 2026-06-08 05:12:54.855738 Details available
In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cause a denial of service via a crafted file.
Published: 2019-07-30T12:05:38.000Z
Updated: 2024-08-05T00:19:40.948Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14441 vulnerable 2026-06-08 05:12:54.855382 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14372 vulnerable 2026-06-08 05:12:54.757254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14371 vulnerable 2026-06-08 05:12:54.756692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20001 vulnerable 2026-06-08 05:11:26.505352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19130 vulnerable 2026-06-08 05:11:15.379603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19129 vulnerable 2026-06-08 05:11:15.379275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19128 vulnerable 2026-06-08 05:11:15.378854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18829 vulnerable 2026-06-08 05:11:14.803503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18828 vulnerable 2026-06-08 05:11:14.803205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18827 vulnerable 2026-06-08 05:11:14.802803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18826 vulnerable 2026-06-08 05:11:14.802421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11224 vulnerable 2026-06-08 05:10:37.999935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11102 vulnerable 2026-06-08 05:10:37.890545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.