Approved changes feed: RSS · Atom

cpe:2.3:a:libav:libav:0.6.3:*:*:*:*:*:*:*

part: a version: 0.6.3 update: *

VendorLibav (813c8cbe-675d-5850-8eef-95f346ccf92f)
ProductLibav (5622b9ed-3e75-5407-8971-c668b118732d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libav-tools purl2cpe 2026-06-01 10:14:37.827786
pkg:github/libav/libav purl2cpe 2026-06-01 10:14:37.827788

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5271 vulnerable 2026-06-08 05:05:47.431384 Details available
Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.
Published: 2014-11-03T16:00:00.000Z
Updated: 2024-08-06T11:41:47.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0947 vulnerable 2026-06-08 05:00:46.605361 Details available
Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VQA media file in which the image size is not a multiple of the block size.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:45:25.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0858 vulnerable 2026-06-08 05:00:45.976549 Details available
The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Shorten file, related to an "invalid free".
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-09-17T00:31:25.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0853 vulnerable 2026-06-08 05:00:45.963347 Details available
The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 allows remote attackers to cause a denial of service (infinite loop and crash) and possibly execute arbitrary code via a large component count in an Atrac 3 file.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:38:14.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0852 vulnerable 2026-06-08 05:00:45.962104 Details available
The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an ADPCM file with the number of channels not equal to two.
Published: 2012-08-20T18:00:00.000Z
Updated: 2024-08-06T18:38:14.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0851 vulnerable 2026-06-08 05:00:45.954860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4579 vulnerable 2026-06-08 04:59:32.002427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4364 vulnerable 2026-06-08 04:59:30.955374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4353 vulnerable 2026-06-08 04:59:30.851192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4352 vulnerable 2026-06-08 04:59:30.849498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3952 vulnerable 2026-06-08 04:59:28.412633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3951 vulnerable 2026-06-08 04:59:28.373411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3947 vulnerable 2026-06-08 04:59:28.369319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3945 vulnerable 2026-06-08 04:59:28.366875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3940 vulnerable 2026-06-08 04:59:28.362957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3937 vulnerable 2026-06-08 04:59:28.361784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3936 vulnerable 2026-06-08 04:59:28.342484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3929 vulnerable 2026-06-08 04:59:28.318769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.