Approved changes feed: RSS · Atom

cpe:2.3:a:libav:libav:0.5:*:*:*:*:*:*:*

part: a version: 0.5 update: *

VendorLibav (813c8cbe-675d-5850-8eef-95f346ccf92f)
ProductLibav (5622b9ed-3e75-5407-8971-c668b118732d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libav-tools purl2cpe 2026-06-01 10:14:37.827746
pkg:github/libav/libav purl2cpe 2026-06-01 10:14:37.827748

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5271 vulnerable 2026-06-08 05:05:47.424443 Details available
Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.
Published: 2014-11-03T16:00:00.000Z
Updated: 2024-08-06T11:41:47.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0947 vulnerable 2026-06-08 05:00:46.605161 Details available
Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VQA media file in which the image size is not a multiple of the block size.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:45:25.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0858 vulnerable 2026-06-08 05:00:45.976373 Details available
The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Shorten file, related to an "invalid free".
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-09-17T00:31:25.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0853 vulnerable 2026-06-08 05:00:45.963171 Details available
The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (infinite loop and crash) and possibly execute arbitrary code via a large component count in an Atrac 3 file.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:38:14.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0852 vulnerable 2026-06-08 05:00:45.961920 Details available
The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:38:14.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0851 vulnerable 2026-06-08 05:00:45.948917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4579 vulnerable 2026-06-08 04:59:32.002254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4364 vulnerable 2026-06-08 04:59:30.955213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4353 vulnerable 2026-06-08 04:59:30.851038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4352 vulnerable 2026-06-08 04:59:30.849334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3952 vulnerable 2026-06-08 04:59:28.412518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3951 vulnerable 2026-06-08 04:59:28.373159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3947 vulnerable 2026-06-08 04:59:28.369138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3945 vulnerable 2026-06-08 04:59:28.366624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3940 vulnerable 2026-06-08 04:59:28.362774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3937 vulnerable 2026-06-08 04:59:28.344973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3936 vulnerable 2026-06-08 04:59:28.342232 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3929 vulnerable 2026-06-08 04:59:28.312980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3362 vulnerable 2026-06-08 04:59:24.904530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1931 vulnerable 2026-06-08 04:58:03.043540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.