https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:25:40.807404+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-09063 bdu:2024-09063 2026-10-03T03:25:40.822741+00:00 bdu:2024-09063 https://cve.radiocsirt.org/vuln/cleanstart-2024-nm17864 CLEANSTART-2024-NM17864 — In FFmpeg 4 2026-10-03T03:25:40.822777+00:00

Affected: CleanStart: ffmpeg4

Security vulnerability affects the ffmpeg4 package. In FFmpeg 4.

 https://cve.radiocsirt.org/vuln/cnvd-2019-02931 cnvd-2019-02931 2026-10-03T03:25:40.822809+00:00 cnvd-2019-02931 https://cve.radiocsirt.org/vuln/euvd-2026-66382 EUVD-2026-66382 2026-10-03T03:25:40.822823+00:00 EUVD-2026-66382 https://cve.radiocsirt.org/vuln/fkie_cve-2018-13301 fkie_cve-2018-13301 2026-10-03T03:25:40.822833+00:00

In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-fc6w-p89q-mp4x GHSA-fc6w-p89q-mp4x 2026-10-03T03:25:40.822855+00:00

In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2018-13301 gsd-2018-13301 2026-10-03T03:25:40.822869+00:00 gsd-2018-13301 https://cve.radiocsirt.org/vuln/suse-su-2019:3184-1 SUSE-SU-2019:3184-1 — Security update for ffmpeg 2026-10-03T03:25:40.822879+00:00

Security update for ffmpeg

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-13301 UBUNTU-CVE-2018-13301 2026-10-03T03:25:40.822895+00:00

Affected: Ubuntu:16.04:LTS: oxide-qt, Ubuntu:16.04:LTS: gst-libav1.0, Ubuntu:16.04:LTS: mythtv, Ubuntu:18.04:LTS: gst-libav1.0, Ubuntu:18.04:LTS: mythtv, Ubuntu:20.04:LTS: gst-libav1.0, Ubuntu:20.04:LTS: mythtv, Ubuntu:22.04:LTS: chromium-browser, Ubuntu:22.04:LTS: gst-libav1.0, Ubuntu:22.04:LTS: mythtv and 9 more

In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service.