TI-2025-07863 CVE-2025-8586 · GHSA-hw46-xx2p-6vfg
libav MPEG File Parser utils.c ff_seek_frame_binary null pointer dereference
Priority MEDIUM 55
A vulnerability, which was classified as problematic, was found in libav up to 12.3.
Libav
Records108All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical27CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9
Exploited now
Libav records in CISA KEVNo Libav vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
108 records in Libav · all components
TI-2025-07862 CVE-2025-8585 · GHSA-328q-vg6x-8ppv
libav DSS File Demuxer avconv.c main double free
Priority MEDIUM 55
A vulnerability, which was classified as critical, has been found in libav up to 12.3.
TI-2025-07861 CVE-2025-8584 · GHSA-vvj3-mv49-x94g
libav AVI File Parser buffer.c av_buffer_unref null pointer dereference
Priority MEDIUM 55
A vulnerability classified as problematic was found in libav up to 12.3.
TI-2014-03250 CVE-2014-3984 · GHSA-fcwr-69r5-xx3p
Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors.
Priority MEDIUM 50
Multiple unspecified vulnerabilities in Libav before 0.8.12 allow remote attackers to have unknown impact and vectors.
TI-2012-04335 CVE-2012-5144 · GHSA-6c83-9pcg-77c5
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5…
Priority MEDIUM 49
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possib…
TI-2012-02425 CVE-2012-2803 · GHSA-v98x-wm9v-cm22
Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in…
Priority MEDIUM 49
Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to resetting t…
TI-2012-02418 CVE-2012-2796 · GHSA-8fvv-pqph-jh9m
Unspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec.c in…
Priority MEDIUM 49
Unspecified vulnerability in the vc1_decode_frame function in libavcodec/vc1dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to inconsistencies in "coded slice posit…
TI-2012-02416 CVE-2012-2794 · GHSA-g7wm-27v9-xhqx
Unspecified vulnerability in the decode_mb_info function in libavcodec/indeo5.c in FFmpeg…
Priority MEDIUM 49
Unspecified vulnerability in the decode_mb_info function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors in which the "allocated ti…
TI-2012-02415 CVE-2012-2793 · GHSA-fx8c-57f3-gvxr
Unspecified vulnerability in the lag_decode_zero_run_line function in…
Priority MEDIUM 49
Unspecified vulnerability in the lag_decode_zero_run_line function in libavcodec/lagarith.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors related to "to…
TI-2012-02412 CVE-2012-2790 · GHSA-hcr6-qm77-jcpq
Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in…
Priority MEDIUM 49
Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to the "numb…
TI-2012-02411 CVE-2012-2789 · GHSA-772j-8vvr-w4hx
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in…
Priority MEDIUM 49
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large numb…
TI-2012-02410 CVE-2012-2788 · GHSA-wgc4-3g78-3h3j
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in…
Priority MEDIUM 49
Unspecified vulnerability in the avi_read_packet function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of a…
TI-2012-02408 CVE-2012-2786 · GHSA-33q7-w2pp-4v3v
Unspecified vulnerability in the decode_wdlt function in libavcodec/dfa.c in FFmpeg…
Priority MEDIUM 49
Unspecified vulnerability in the decode_wdlt function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array wri…
TI-2012-02406 CVE-2012-2784 · GHSA-mgvg-34gh-hq83
Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg…
Priority MEDIUM 49
Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height cha…
TI-2012-02405 CVE-2012-2783 · GHSA-5j58-cmf8-pfrp
Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x…
Priority MEDIUM 49
Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to "freeing the returned frame."
TI-2012-02401 CVE-2012-2779 · GHSA-28g7-p757-pxq8
Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg…
Priority MEDIUM 49
Unspecified vulnerability in the decode_frame function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an invalid "gop…
TI-2012-02399 CVE-2012-2777 · GHSA-mvc7-hj3c-927m
Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg…
Priority MEDIUM 49
Unspecified vulnerability in the decode_pic function in libavcodec/cavsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height cha…
TI-2012-02397 CVE-2012-2775 · GHSA-vhcx-wrgv-8hv9
Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in…
Priority MEDIUM 49
Unspecified vulnerability in the read_var_block_data function in libavcodec/alsdec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to a large o…
TI-2012-02426 CVE-2012-2804 · GHSA-8663-4gw8-h5m6
Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x…
Priority MEDIUM 48
Unspecified vulnerability in libavcodec/indeo3.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors, related to "reallocation code" and the luma height and width.
TI-2012-02424 CVE-2012-2802 · GHSA-gcwm-gg76-5wqr
Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in…
Priority MEDIUM 48
Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.4 has unknown impact and attack vectors, related to the "number of output channels" and "…
TI-2012-02423 CVE-2012-2801 · GHSA-8gr4-47p2-7q2w
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x…
Priority MEDIUM 48
Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to dimensions and "out of array writes."
TI-2012-02422 CVE-2012-2800 · GHSA-cf86-cfg7-g4j9
Unspecified vulnerability in the ff_ivi_process_empty_tile function in…
Priority MEDIUM 48
Unspecified vulnerability in the ff_ivi_process_empty_tile function in libavcodec/ivi_common.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors in which th…
TI-2012-02420 CVE-2012-2798 · GHSA-qcpw-4x74-jfpp
Unspecified vulnerability in the decode_dds1 function in libavcodec/dfa.c in FFmpeg…
Priority MEDIUM 48
Unspecified vulnerability in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array wri…
TI-2012-02419 CVE-2012-2797 · GHSA-c9gh-9qxq-gm83
Unspecified vulnerability in the decode_frame_mp3on4 function in…
Priority MEDIUM 48
Unspecified vulnerability in the decode_frame_mp3on4 function in libavcodec/mpegaudiodec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8.5 has unknown impact and attack vectors related to a calculation that prevents a…
TI-2012-02413 CVE-2012-2791 · GHSA-4768-g35x-83q9
Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and…
Priority MEDIUM 48
Multiple unspecified vulnerabilities in the (1) decode_band_hdr function in indeo4.c and (2) ff_ivi_decode_blocks function in ivi_common.c in libavcodec/ in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x befo…