Описание
Security update for ffmpeg-7
This update for ffmpeg-7 fixes the following issues
- CVE-2026-40962: inadequate CENC subsample bounds checks can lead to an integer overflow (bsc#1262237).
Changes for ffmpeg-7:
- Update to version 7.1.4:
- Codec, format, filter and various other bugfixes.
- lavc/aarch64: Fix addp overflow in ff_pred16x16_plane_neon_10
- swscale/output: Fix integer overflow in yuv2ya16_X_c_template()
- avformat/avformat: clear FFFormatContext packet queue when closing a muxer
Список пакетов
openSUSE Leap 16.0
Ссылки
- SUSE Security Ratings
- SUSE Bug 1220545
- SUSE Bug 1234030
- SUSE Bug 1237561
- SUSE Bug 1249393
- SUSE Bug 1249431
- SUSE Bug 1262237
- SUSE CVE CVE-2023-6601 page
- SUSE CVE CVE-2024-35366 page
- SUSE CVE CVE-2025-10256 page
- SUSE CVE CVE-2025-1594 page
- SUSE CVE CVE-2025-25473 page
- SUSE CVE CVE-2025-9951 page
- SUSE CVE CVE-2026-40962 page
Описание
A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.
Затронутые продукты
Ссылки
- CVE-2023-6601
- SUSE Bug 1220545
Описание
FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking.
Затронутые продукты
Ссылки
- CVE-2024-35366
- SUSE Bug 1234030
Описание
A NULL pointer dereference vulnerability exists in FFmpeg's Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return value of av_malloc_array() in the config_input() function. An attacker could exploit this by tricking a victim into processing a crafted media file with the Firequalizer filter enabled, causing the application to dereference a NULL pointer and crash, leading to denial of service.
Затронутые продукты
Ссылки
- CVE-2025-10256
- SUSE Bug 1249431
Описание
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Затронутые продукты
Ссылки
- CVE-2025-1594
- SUSE Bug 1237561
Описание
FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformat_free_context function in libavutil/mem.c.
Затронутые продукты
Ссылки
- CVE-2025-25473
- SUSE Bug 1237351
Описание
A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000.
Затронутые продукты
Ссылки
- CVE-2025-9951
- SUSE Bug 1249393
Описание
FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.
Затронутые продукты
Ссылки
- CVE-2026-40962
- SUSE Bug 1262237