Libav vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2014-4609 Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbHigh 8.8 · Jan 14, 2020
• CVE-2019-9719 A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matroska format, because sHigh 8.8 · Sep 19, 2019
• CVE-2018-11102 An issue was discovered in Libav 12.3.High 7.5 · May 14, 2018
• CVE-2018-5766 In Libav through 12.2, there is an invalid memcpy in the av_packet_ref function of libavcodec/avpacket.c.High 8.8 · Jan 18, 2018
• CVE-2018-5684 In Libav through 12.2, there is an invalid memcpy call in the ff_mov_read_stsd_entries function of libavformat/mov.c.High 8.8 · Jan 13, 2018
• CVE-2017-17130 The ff_free_picture_tables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-based buffer overflow aHigh 8.8 · Dec 4, 2017
• CVE-2017-17129 The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in Libav 12.2 allows remote attackers to cause a denial of service (segmentation fault and applicationHigh 8.8 · Dec 4, 2017
• CVE-2017-16803 In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows rHigh 7.5 · Nov 13, 2017
• CVE-2017-11684 There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via crafted inHigh 7.5 · Jul 27, 2017
• CVE-2017-9987 There is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav 12.1.High 7.5 · Jun 28, 2017
• CVE-2017-9051 libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsv_read_chunk function in libavformat/nsvdec.c.Critical 9.8 · May 18, 2017
• CVE-2017-7208 The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive informationHigh 7.1 · Mar 21, 2017
• CVE-2017-7206 The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read) or obtain sensHigh 7.1 · Mar 21, 2017
• CVE-2016-3062 The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to cause a denial of service (memory corruptHigh 8.8 · Jun 16, 2016
• CVE-2014-3984 Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors.High 10 · Jun 6, 2014
• CVE-2012-2804 Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors, related to "reallocatHigh 10 · Sep 10, 2012
• CVE-2012-2803 Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, hHigh 10 · Sep 10, 2012
• CVE-2012-2802 Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attaHigh 10 · Sep 10, 2012
• CVE-2012-2801 Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors,High 10 · Sep 10, 2012
• CVE-2012-2800 Unspecified vulnerability in the ff_ivi_process_empty_tile function in libavcodec/ivi_common.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x befHigh 10 · Sep 10, 2012
• CVE-2012-2798 Unspecified vulnerability in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknowHigh 10 · Sep 10, 2012
• CVE-2012-2794 Unspecified vulnerability in the decode_mb_info function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has High 10 · Sep 10, 2012
• CVE-2012-2793 Unspecified vulnerability in the lag_decode_zero_run_line function in libavcodec/lagarith.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x beforeHigh 10 · Sep 10, 2012
• CVE-2012-2790 Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4,High 10 · Sep 10, 2012
• CVE-2012-2789 Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, haHigh 10 · Sep 10, 2012