Approved changes feed: RSS · Atom

cpe:2.3:a:ffmpeg:ffmpeg:1.1:*:*:*:*:*:*:*

part: a version: 1.1 update: *

VendorFfmpeg (4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f)
ProductFfmpeg (69475a2d-e046-5b0f-b6da-299c42a85e87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ffmpeg purl2cpe 2026-06-01 10:12:29.447057
pkg:deb/ubuntu/ffmpeg purl2cpe 2026-06-01 10:12:29.447059
pkg:ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.447060
pkg:github/ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.447061
pkg:opensuse/ffmpeg purl2cpe 2026-06-01 10:12:29.447063

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8549 vulnerable 2026-06-08 05:06:09.182063 Details available
libavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted On2 data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8548 vulnerable 2026-06-08 05:06:09.179214 Details available
Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Quicktime Graphics (aka SMC) video data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8547 vulnerable 2026-06-08 05:06:09.173835 Details available
libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8546 vulnerable 2026-06-08 05:06:09.171281 Details available
Integer underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Cinepak video data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8545 vulnerable 2026-06-08 05:06:09.168525 Details available
libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the monochrome-black format without verifying that the bits-per-pixel value is 1, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted PNG data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8544 vulnerable 2026-06-08 05:06:09.165969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8543 vulnerable 2026-06-08 05:06:09.163397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8541 vulnerable 2026-06-08 05:06:09.140986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5272 vulnerable 2026-06-08 05:05:47.442594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5271 vulnerable 2026-06-08 05:05:47.405024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0878 vulnerable 2026-06-08 05:03:50.799138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0877 vulnerable 2026-06-08 05:03:50.797705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0875 vulnerable 2026-06-08 05:03:50.794635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0873 vulnerable 2026-06-08 05:03:50.791741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0867 vulnerable 2026-06-08 05:03:50.756341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0866 vulnerable 2026-06-08 05:03:50.754881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0865 vulnerable 2026-06-08 05:03:50.753331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0861 vulnerable 2026-06-08 05:03:50.731419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0860 vulnerable 2026-06-08 05:03:50.729788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.