FFmpeg 4.4
Approved changes feed: RSS · Atom
cpe:2.3:a:ffmpeg:ffmpeg:4.4:*:*:*:*:*:*:*
part: a version: 4.4 update: *
| Vendor | Ffmpeg (4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f) |
|---|---|
| Product | Ffmpeg (69475a2d-e046-5b0f-b6da-299c42a85e87) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.449032 |
pkg:deb/ubuntu/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.449033 |
pkg:ffmpeg/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.449035 |
pkg:github/ffmpeg/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.449036 |
pkg:opensuse/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.449038 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-38171 |
vulnerable | 2026-06-08 05:32:55.604503 |
Details available
adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a necessary step because the second argument to init_get_bits can be crafted.
Published: 2021-08-21T00:00:00.000Z
Updated: 2024-08-04T01:37:16.217Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38114 |
vulnerable | 2026-06-08 05:32:55.435031 |
Details available
libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.
Published: 2021-08-04T20:15:32.000Z
Updated: 2024-08-04T01:30:09.251Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33815 |
vulnerable | 2026-06-08 05:32:12.513240 |
Details available
dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly checked.
Published: 2021-06-03T00:00:00.000Z
Updated: 2024-08-03T23:58:23.051Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30123 |
vulnerable | 2026-06-08 05:31:46.911945 |
Details available
FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution.
Published: 2021-04-07T19:16:02.000Z
Updated: 2024-08-03T22:24:59.335Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.