Approved changes feed: RSS · Atom

cpe:2.3:a:libav:libav:0.5.4:*:*:*:*:*:*:*

part: a version: 0.5.4 update: *

VendorLibav (813c8cbe-675d-5850-8eef-95f346ccf92f)
ProductLibav (5622b9ed-3e75-5407-8971-c668b118732d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libav-tools purl2cpe 2026-06-01 10:14:37.827761
pkg:github/libav/libav purl2cpe 2026-06-01 10:14:37.827762

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5271 vulnerable 2026-06-08 05:05:47.426866 Details available
Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.
Published: 2014-11-03T16:00:00.000Z
Updated: 2024-08-06T11:41:47.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0947 vulnerable 2026-06-08 05:00:46.605242 Details available
Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VQA media file in which the image size is not a multiple of the block size.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:45:25.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0858 vulnerable 2026-06-08 05:00:45.976438 Details available
The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Shorten file, related to an "invalid free".
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-09-17T00:31:25.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0853 vulnerable 2026-06-08 05:00:45.963234 Details available
The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (infinite loop and crash) and possibly execute arbitrary code via a large component count in an Atrac 3 file.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:38:14.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0852 vulnerable 2026-06-08 05:00:45.961986 Details available
The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:38:14.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0851 vulnerable 2026-06-08 05:00:45.951349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4579 vulnerable 2026-06-08 04:59:32.002332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4364 vulnerable 2026-06-08 04:59:30.955282 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4353 vulnerable 2026-06-08 04:59:30.851105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4352 vulnerable 2026-06-08 04:59:30.849414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3951 vulnerable 2026-06-08 04:59:28.373226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3947 vulnerable 2026-06-08 04:59:28.369209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3945 vulnerable 2026-06-08 04:59:28.366690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3940 vulnerable 2026-06-08 04:59:28.362841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3937 vulnerable 2026-06-08 04:59:28.345045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3936 vulnerable 2026-06-08 04:59:28.342367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3929 vulnerable 2026-06-08 04:59:28.315561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3362 vulnerable 2026-06-08 04:59:24.905179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1931 vulnerable 2026-06-08 04:58:03.044075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.