Ffmpeg Vulnerabilidad

Cronología

El año pasado

Versión

2.0185
2.1165
1.0104
1.196
1.291

Contramedidas

Official Fix848
Temporary Fix0
Workaround0
Unavailable0
Not Defined78

Explotabilidad

High0
Functional0
Proof-of-Concept29
Unproven51
Not Defined846

Vector de acceso

Not Defined0
Physical0
Local119
Adjacent37
Network770

Autenticación

Not Defined0
High0
Low124
None802

La interacción del usuario

Not Defined0
Required162
None764

C3BM Index

El año pasado

CVSSv3 Base

≤10
≤20
≤30
≤418
≤551
≤6398
≤789
≤8179
≤944
≤10147

CVSSv3 Temp

≤10
≤20
≤36
≤412
≤596
≤6380
≤7127
≤8122
≤948
≤10135

VulDB

≤10
≤20
≤30
≤423
≤590
≤6365
≤7107
≤8160
≤934
≤10147

NVD

≤10
≤20
≤30
≤40
≤50
≤615
≤743
≤822
≤939
≤1025

CNA

≤10
≤20
≤30
≤40
≤51
≤60
≤70
≤80
≤91
≤101

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k68
<2k233
<5k625
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k908
<2k17
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (207): 0.1, 0.2, 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.4, 0.4.2, 0.4.3, 0.4.4, 0.4.5, 0.4.6, 0.4.7, 0.4.8, 0.4.9, 0.4.9 Pre1, 0.5, 0.5.1, 0.5.2, 0.5.3, 0.5.4, 0.5.4.5, 0.5.4.6, 0.5.5, 0.5.9, 0.6, 0.6.1, 0.6.2, 0.6.3, 0.7, 0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5, 0.7.6, 0.7.7, 0.7.8, 0.7.9, 0.7.11, 0.7.12, 0.8, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.5.3, 0.8.5.4, 0.8.6, 0.8.7, 0.8.8, 0.8.9, 0.8.11, 0.8.12, 0.8.13, 0.8.14, 0.9, 0.9.1, 0.10, 0.11, 0.11.1, 0.11.2, 0.11.3, 1.0, 1.0.1, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 1.1.11, 1.1.12, 1.1.13, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.2, 2.2.4, 2.3, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.4, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5, 2.5, 2.5.1, 2.5.2, 2.5.3, 2.6, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.7, 2.7.1, 2.7.2, 2.8, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5, 2.8.6, 2.8.7, 2.8.8, 2.8.9, 2.8.11, 3, 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.1.7, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.2.5, 3.2.6, 3.2.7, 3.2.8, 3.2.9, 3.2.11, 3.2.12, 3.2.13, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.4, 3.4.1, 3.4.2, 4, 4.0, 4.0.1, 4.0.2, 4.0.3, 4.1, 4.1.1, 4.1.2, 4.1.3, 4.2, 4.2.1, 4.2.2, 4.2.3, 4.3, 4.3.1, 4.3.2, 4.4, 5, 5.0.1, 5.1, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 6, 6.0, 6.0.1, 6.1, 6.1-3-g466799d4f5, 6.1.1, 9.1, 9.8, 9.10

Link to Product Website: https://ffmpeg.org/

Tipo de software: Multimedia Processing Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2024-04-175.55.5FFmpeg cbs_h266_syntax_template.c desbordamiento de búfer$0-$5k$0-$5kNot DefinedNot Defined0.16-CVE-2024-31581
2024-04-176.36.1FFmpeg vf_codecview.c draw_block_rectangle desbordamiento de búfer$0-$5k$0-$5kNot DefinedNot Defined0.28-CVE-2024-31582
2024-04-174.34.3FFmpeg avf_showspectrum.c denegación de servicio$0-$5k$0-$5kNot DefinedNot Defined0.12-CVE-2024-31585
2024-04-176.36.3FFmpeg av_hwframe_ctx_init desbordamiento de búfer$0-$5k$0-$5kNot DefinedNot Defined0.20-CVE-2024-31578
2024-04-124.34.3FFmpeg de_stereo af_dialoguenhance.c denegación de servicio$0-$5k$0-$5kNot DefinedNot Defined0.07CVE-2023-49528
2024-04-076.36.3FFmpeg Remote Code Execution$0-$5k$0-$5kNot DefinedNot Defined0.07CVE-2024-28661
2024-01-275.95.8FFmpeg avcodec desbordamiento de búfer$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-22861
2024-01-278.07.9FFmpeg JPEG XL Animation Decoder jpegxl_anim_read_packet desbordamiento de búfer$0-$5k$0-$5kNot DefinedOfficial Fix0.08CVE-2024-22860
2024-01-278.07.9FFmpeg JJPEG XL Parser desbordamiento de búfer$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-22862
2024-01-046.36.0FFmpeg Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.06CVE-2023-47343
2023-11-166.05.9FFmpeg evc_ps.c ref_pic_list_struct desbordamiento de búfer$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-47470
2023-11-145.55.3FFmpeg Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-47344
2023-11-145.55.3FFmpeg Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-47342
2023-10-274.94.8FFmpeg read_vlc_prefix divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-46407
2023-08-115.95.8FFmpeg tiff.c decode_frame denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.06CVE-2020-36138
2023-08-114.44.3FFmpeg timecode.c av_timecode_make_string denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-28429
2023-07-288.07.9FFmpeg net.bramp.ffmpeg.FFmpeg escalada de privilegios$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-39018
2023-03-297.27.0FFmpeg pthread_frame.c desbordamiento de búfer$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-48434
2023-01-124.84.7FFmpeg nutdec.c decode_main_header denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-3341
2022-12-166.36.0FFmpeg vp3.c vp3_decode_frame denegación de servicio$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-3109
2022-11-135.65.5ffmpeg QuickTime Graphics Video Encoder smcenc.c smc_encode_stream divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-3965
2022-11-134.34.1ffmpeg QuickTime RPZA Video Encoder rpzaenc.c divulgación de información$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-3964
2022-09-237.77.6FFmpeg build_open_gop_key_points desbordamiento de búfer$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-2566
2022-07-258.88.8ffmpeg-sdk index.js escalada de privilegios$0-$5k$0-$5kNot DefinedNot Defined0.06CVE-2020-28435
2022-05-036.36.3FFmpeg g729_parser.c g729_parse desbordamiento de búfer$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2022-1475

901 no se muestran más entradas

Want to stay up to date on a daily basis?

Enable the mail alert feature now!