Approved changes feed: RSS · Atom

cpe:2.3:a:ffmpeg:ffmpeg:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

VendorFfmpeg (4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f)
ProductFfmpeg (69475a2d-e046-5b0f-b6da-299c42a85e87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ffmpeg purl2cpe 2026-06-01 10:12:29.446951
pkg:deb/ubuntu/ffmpeg purl2cpe 2026-06-01 10:12:29.446952
pkg:ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.446953
pkg:github/ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.446955
pkg:opensuse/ffmpeg purl2cpe 2026-06-01 10:12:29.446956

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8549 vulnerable 2026-06-08 05:06:09.182014 Details available
libavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted On2 data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8548 vulnerable 2026-06-08 05:06:09.179166 Details available
Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Quicktime Graphics (aka SMC) video data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8547 vulnerable 2026-06-08 05:06:09.173786 Details available
libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8546 vulnerable 2026-06-08 05:06:09.171232 Details available
Integer underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Cinepak video data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8545 vulnerable 2026-06-08 05:06:09.168474 Details available
libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted PNG data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8544 vulnerable 2026-06-08 05:06:09.165921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8543 vulnerable 2026-06-08 05:06:09.163348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8541 vulnerable 2026-06-08 05:06:09.139069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0863 vulnerable 2026-06-08 05:03:50.744932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0862 vulnerable 2026-06-08 05:03:50.732978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0860 vulnerable 2026-06-08 05:03:50.728580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0858 vulnerable 2026-06-08 05:03:50.650766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0845 vulnerable 2026-06-08 05:03:50.630652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0844 vulnerable 2026-06-08 05:03:50.628852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.