Approved changes feed: RSS · Atom

cpe:2.3:a:libav:libav:0.6.2:*:*:*:*:*:*:*

part: a version: 0.6.2 update: *

VendorLibav (813c8cbe-675d-5850-8eef-95f346ccf92f)
ProductLibav (5622b9ed-3e75-5407-8971-c668b118732d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libav-tools purl2cpe 2026-06-01 10:14:37.827783
pkg:github/libav/libav purl2cpe 2026-06-01 10:14:37.827785

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5271 vulnerable 2026-06-08 05:05:47.430788 Details available
Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.
Published: 2014-11-03T16:00:00.000Z
Updated: 2024-08-06T11:41:47.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0947 vulnerable 2026-06-08 05:00:46.605344 Details available
Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VQA media file in which the image size is not a multiple of the block size.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:45:25.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0858 vulnerable 2026-06-08 05:00:45.976533 Details available
The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Shorten file, related to an "invalid free".
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-09-17T00:31:25.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0853 vulnerable 2026-06-08 05:00:45.963331 Details available
The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (infinite loop and crash) and possibly execute arbitrary code via a large component count in an Atrac 3 file.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:38:14.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0852 vulnerable 2026-06-08 05:00:45.962087 Details available
The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:38:14.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0851 vulnerable 2026-06-08 05:00:45.954255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4579 vulnerable 2026-06-08 04:59:32.002407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4364 vulnerable 2026-06-08 04:59:30.955354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4353 vulnerable 2026-06-08 04:59:30.851175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4352 vulnerable 2026-06-08 04:59:30.849480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3952 vulnerable 2026-06-08 04:59:28.412617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3951 vulnerable 2026-06-08 04:59:28.373394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3947 vulnerable 2026-06-08 04:59:28.369303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3945 vulnerable 2026-06-08 04:59:28.366857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3940 vulnerable 2026-06-08 04:59:28.362940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3937 vulnerable 2026-06-08 04:59:28.361764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3936 vulnerable 2026-06-08 04:59:28.342466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3929 vulnerable 2026-06-08 04:59:28.317494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3362 vulnerable 2026-06-08 04:59:24.906667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.