Описание
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues:
Changes in ffmpeg-4:
-
CVE-2025-59728: Fixed out-of-bounds NUL-byte write when calculating the content path in handling of MPEG-DASH manifests (bsc#1251137).
-
CVE-2025-7700: Fixed a NULL Pointer Dereference in the ALS Decoder (bsc#1246790)
-
CVE-2024-36618: Fixed a integer overflow in AVI demuxer (bsc#1234020)
-
CVE-2023-6601: Fixed HLS Unsafe File Extension Bypass (bsc#1220545).
-
Update to release 4.4.6
- lavc/libx265: unbreak build for X265_BUILD >= 210
- ARM: vp9mc: Load only 12 pixels in the 4 pixel wide horizontal filter
- rtmpproto: Avoid rare crashes in the
fail:codepath in rtmp_open - avcodec/snow: Fix off by 1 error in run_buffer
- avcodec/mpegvideo_enc: Check FLV1 resolution limits
Список пакетов
openSUSE Leap 16.0
Ссылки
- SUSE Security Ratings
- SUSE Bug 1198898
- SUSE Bug 1220545
- SUSE Bug 1223304
- SUSE Bug 1226308
- SUSE Bug 1226892
- SUSE Bug 1226897
- SUSE Bug 1226898
- SUSE Bug 1226899
- SUSE Bug 1226900
- SUSE Bug 1226901
- SUSE Bug 1230983
- SUSE Bug 1234018
- SUSE Bug 1234019
- SUSE Bug 1234020
- SUSE Bug 1246790
- SUSE Bug 1251137
- SUSE CVE CVE-2022-1475 page
- SUSE CVE CVE-2023-22656 page
- SUSE CVE CVE-2023-45221 page
Описание
An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.
Затронутые продукты
Ссылки
- CVE-2022-1475
- SUSE Bug 1198898
Описание
Out-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
Затронутые продукты
Ссылки
- CVE-2023-22656
- SUSE Bug 1226899
Описание
Improper buffer restrictions in Intel(R) Media SDK all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
Затронутые продукты
Ссылки
- CVE-2023-45221
- SUSE Bug 1226898
Описание
Improper buffer restrictions in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.
Затронутые продукты
Ссылки
- CVE-2023-47169
- SUSE Bug 1226901
Описание
Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
Затронутые продукты
Ссылки
- CVE-2023-47282
- SUSE Bug 1226900
Описание
Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.
Затронутые продукты
Ссылки
- CVE-2023-48368
- SUSE Bug 1226897
Описание
Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in the libavfilter/bwdifdsp.c:125:5 component.
Затронутые продукты
Ссылки
- CVE-2023-49502
- SUSE Bug 1223235
Описание
FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff_gradfun_blur_line_movdqa_sse2, as demonstrated by a call to the set_encoder_id function in /fftools/ffmpeg_enc.c component.
Затронутые продукты
Ссылки
- CVE-2023-50010
- SUSE Bug 1223256
Описание
Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via a floating point exception (FPE) error at libavfilter/vf_minterpolate.c:1078:60 in interpolate.
Затронутые продукты
Ссылки
- CVE-2023-51798
- SUSE Bug 1223304
Описание
A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.
Затронутые продукты
Ссылки
- CVE-2023-6601
- SUSE Bug 1220545
Описание
An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file.
Затронутые продукты
Ссылки
- CVE-2024-36616
- SUSE Bug 1234018
Описание
FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.
Затронутые продукты
Ссылки
- CVE-2024-36617
- SUSE Bug 1234019
Описание
FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition.
Затронутые продукты
Ссылки
- CVE-2024-36618
- SUSE Bug 1234020
Описание
Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C . This issue affects FFmpeg: 7.1. Issue was fixed: https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman
Затронутые продукты
Ссылки
- CVE-2025-0518
- SUSE Bug 1236007
Описание
A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (DoS) via opening a crafted AAC file.
Затронутые продукты
Ссылки
- CVE-2025-22919
- SUSE Bug 1237371
Описание
When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below [0], it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is not an empty string, it is assigned to root_url at [1].If the last (non-NUL) byte in this buffer is not '/' then we append '/' in-place at [2]. This will write two bytes into the buffer, starting at the last valid byte in the buffer, writing the NUL byte beyond the end of the allocated buffer. We recommend upgrading to version 8.0 or beyond.
Затронутые продукты
Ссылки
- CVE-2025-59728
- SUSE Bug 1251137
Описание
A flaw was found in FFmpeg's ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and cause a denial of service.
Затронутые продукты
Ссылки
- CVE-2025-7700
- SUSE Bug 1246790