Approved changes feed: RSS · Atom

cpe:2.3:a:libav:libav:0.6.1:*:*:*:*:*:*:*

part: a version: 0.6.1 update: *

VendorLibav (813c8cbe-675d-5850-8eef-95f346ccf92f)
ProductLibav (5622b9ed-3e75-5407-8971-c668b118732d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libav-tools purl2cpe 2026-06-01 10:14:37.827781
pkg:github/libav/libav purl2cpe 2026-06-01 10:14:37.827782

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5271 vulnerable 2026-06-08 05:05:47.430302 Details available
Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.
Published: 2014-11-03T16:00:00.000Z
Updated: 2024-08-06T11:41:47.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0947 vulnerable 2026-06-08 05:00:46.605326 Details available
Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VQA media file in which the image size is not a multiple of the block size.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:45:25.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0858 vulnerable 2026-06-08 05:00:45.976517 Details available
The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Shorten file, related to an "invalid free".
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-09-17T00:31:25.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0853 vulnerable 2026-06-08 05:00:45.963316 Details available
The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (infinite loop and crash) and possibly execute arbitrary code via a large component count in an Atrac 3 file.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:38:14.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0852 vulnerable 2026-06-08 05:00:45.962070 Details available
The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:38:14.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0851 vulnerable 2026-06-08 05:00:45.953758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4579 vulnerable 2026-06-08 04:59:32.002388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4364 vulnerable 2026-06-08 04:59:30.955336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4353 vulnerable 2026-06-08 04:59:30.851159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4352 vulnerable 2026-06-08 04:59:30.849464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3952 vulnerable 2026-06-08 04:59:28.412601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3951 vulnerable 2026-06-08 04:59:28.373378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3947 vulnerable 2026-06-08 04:59:28.369288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3945 vulnerable 2026-06-08 04:59:28.366836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3940 vulnerable 2026-06-08 04:59:28.362923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3937 vulnerable 2026-06-08 04:59:28.361743 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3936 vulnerable 2026-06-08 04:59:28.342450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3929 vulnerable 2026-06-08 04:59:28.317472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3362 vulnerable 2026-06-08 04:59:24.906132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1931 vulnerable 2026-06-08 04:58:03.045053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.