Approved changes feed: RSS · Atom

cpe:2.3:a:ffmpeg:ffmpeg:2.0.2:*:*:*:*:*:*:*

part: a version: 2.0.2 update: *

VendorFfmpeg (4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f)
ProductFfmpeg (69475a2d-e046-5b0f-b6da-299c42a85e87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ffmpeg purl2cpe 2026-06-01 10:12:29.447339
pkg:deb/ubuntu/ffmpeg purl2cpe 2026-06-01 10:12:29.447340
pkg:ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.447341
pkg:github/ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.447343
pkg:opensuse/ffmpeg purl2cpe 2026-06-01 10:12:29.447344

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-1898 vulnerable 2026-06-08 05:07:32.233595 Details available
FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file.
Published: 2016-01-15T02:00:00.000Z
Updated: 2024-08-05T23:10:40.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1897 vulnerable 2026-06-08 05:07:32.192569 Details available
FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file.
Published: 2016-01-15T02:00:00.000Z
Updated: 2024-08-05T23:10:39.912Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8549 vulnerable 2026-06-08 05:06:09.182531 Details available
libavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted On2 data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8548 vulnerable 2026-06-08 05:06:09.179652 Details available
Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted Quicktime Graphics (aka SMC) video data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8547 vulnerable 2026-06-08 05:06:09.176579 Details available
libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted GIF data.
Published: 2014-11-05T11:00:00.000Z
Updated: 2024-08-06T13:18:48.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8546 vulnerable 2026-06-08 05:06:09.171651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8545 vulnerable 2026-06-08 05:06:09.169067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8544 vulnerable 2026-06-08 05:06:09.166349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8543 vulnerable 2026-06-08 05:06:09.163779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8541 vulnerable 2026-06-08 05:06:09.152902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5272 vulnerable 2026-06-08 05:05:47.442961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5271 vulnerable 2026-06-08 05:05:47.416741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2263 vulnerable 2026-06-08 05:05:28.159132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2099 vulnerable 2026-06-08 05:05:27.562176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2098 vulnerable 2026-06-08 05:05:27.561506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2097 vulnerable 2026-06-08 05:05:27.559014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.