Known vulnerabilities in ffmpeg (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:ffmpeg_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 54
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ffmpeg (Ubuntu package) ffmpeg (Ubuntu package) is affected by 54 known vulnerabilities: 31 high, 11 medium, 12 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117665 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-6605
CWE-611 Low
No
No
7:3.4.11-0ubuntu0.1+esm11, 7:4.2.7-0ubuntu0.1+esm11, 7:4.4.2-0ubuntu0.22.04.1+esm10, 7:6.1.1-3ubuntu5+esm6 27.10.2025 SB2025102710
SB2025102719
#VU117664 - Heap-based Buffer Overflow
CVE-2025-9951
CWE-122 High
No
No
7:3.4.11-0ubuntu0.1+esm11, 7:4.2.7-0ubuntu0.1+esm11, 7:4.4.2-0ubuntu0.22.04.1+esm10, 7:6.1.1-3ubuntu5+esm6 27.10.2025 SB2025102709
SB2025102719
#VU117663 - NULL Pointer Dereference
CVE-2025-10256
CWE-476 Low
No
No
7:3.4.11-0ubuntu0.1+esm11, 7:4.2.7-0ubuntu0.1+esm11, 7:4.4.2-0ubuntu0.22.04.1+esm10, 7:6.1.1-3ubuntu5+esm6 27.10.2025 SB2025102708
SB2025102719
SB2026072205
#VU117662 - NULL Pointer Dereference
CVE-2023-6603
CWE-476 Low
No
No
7:2.8.17-0ubuntu0.1+esm13, 7:3.4.11-0ubuntu0.1+esm11, 7:4.2.7-0ubuntu0.1+esm11, 7:4.4.2-0ubuntu0.22.04.1+esm10, 7:6.1.1-3ubuntu5+esm6 27.10.2025 SB2025102708
SB2025102719
SB2025112728
#VU117351 - Out-of-bounds read
CVE-2024-35367
CWE-125 Medium
No
No
7:2.8.17-0ubuntu0.1+esm12, 7:3.4.11-0ubuntu0.1+esm10, 7:4.2.7-0ubuntu0.1+esm10, 7:4.4.2-0ubuntu0.22.04.1+esm9, 7:6.1.1-3ubuntu5+esm5 17.10.2025 SB2025101752
SB2025101753
SB2025101760
and 1 more
#VU117350 - Integer overflow
CVE-2024-35366
CWE-190 High
No
No
7:2.8.17-0ubuntu0.1+esm12, 7:3.4.11-0ubuntu0.1+esm10, 7:4.2.7-0ubuntu0.1+esm10, 7:4.4.2-0ubuntu0.22.04.1+esm9, 7:6.1.1-3ubuntu5+esm5 17.10.2025 SB2025101752
SB2025101753
SB2024120682
#VU115966 - NULL Pointer Dereference
CVE-2025-7700
CWE-476 Medium
No
No
7:3.4.11-0ubuntu0.1+esm11, 7:4.2.7-0ubuntu0.1+esm11, 7:4.4.2-0ubuntu0.22.04.1+esm10, 7:6.1.1-3ubuntu5+esm6, 7:7.1.1-1ubuntu1.3, 7:7.1.1-1ubuntu4.1 19.09.2025 SB20250919148
SB20250919153
SB20250919154
and 9 more
#VU114804 - Memory corruption
CVE-2025-1594
CWE-119 High
No
No
7:2.8.17-0ubuntu0.1+esm11, 7:3.4.11-0ubuntu0.1+esm9, 7:4.2.7-0ubuntu0.1+esm9, 7:4.4.2-0ubuntu0.22.04.1+esm8, 7:6.1.1-3ubuntu5+esm4, 7:7.1.1-1ubuntu1.2 04.09.2025 SB2025090460
SB2025090471
SB2025092101
#VU107133 - Integer overflow
CVE-2024-36613
CWE-190 Low
No
No
7:2.8.17-0ubuntu0.1+esm12, 7:3.4.11-0ubuntu0.1+esm10, 7:4.2.7-0ubuntu0.1+esm10, 7:4.4.2-0ubuntu0.22.04.1+esm9, 7:6.1.1-3ubuntu5+esm5 08.04.2025 SB2025040811
SB2025050525
SB2025101753
#VU103288 - Double Free
CVE-2024-35365
CWE-415 High
No
No
7:2.8.17-0ubuntu0.1+esm12, 7:3.4.11-0ubuntu0.1+esm10, 7:4.2.7-0ubuntu0.1+esm10, 7:4.4.2-0ubuntu0.22.04.1+esm9, 7:6.1.1-3ubuntu5+esm5 24.01.2025 SB2024122032
SB2025012456
SB2025012457
and 2 more
#VU102574 - Integer overflow
CVE-2024-36619
CWE-190 Medium
No
No
7:2.8.17-0ubuntu0.1+esm12, 7:3.4.11-0ubuntu0.1+esm10, 7:4.2.7-0ubuntu0.1+esm10, 7:4.4.2-0ubuntu0.22.04.1+esm9, 7:6.1.1-3ubuntu5+esm5 13.01.2025 SB2025011352
SB2025011362
SB2025101753
#VU101885 - Integer overflow
CVE-2024-36618
CWE-190 High
No
No
7:2.8.17-0ubuntu0.1+esm12, 7:3.4.11-0ubuntu0.1+esm10, 7:4.2.7-0ubuntu0.1+esm10, 7:4.4.2-0ubuntu0.22.04.1+esm9, 7:6.1.1-3ubuntu5+esm5 20.12.2024 SB2024122032
SB2024122041
SB2024122042
and 5 more
#VU101884 - Integer overflow
CVE-2024-36617
CWE-190 High
No
No
Ubuntu Pro, 7:6.1.1-3ubuntu5+esm8 20.12.2024 SB2024122032
SB2024122041
SB2024122042
and 5 more
#VU101883 - Integer overflow
CVE-2024-36616
CWE-190 High
No
No
7:2.8.17-0ubuntu0.1+esm12, 7:3.4.11-0ubuntu0.1+esm10, 7:4.2.7-0ubuntu0.1+esm10, 7:4.4.2-0ubuntu0.22.04.1+esm9, 7:6.1.1-3ubuntu5+esm5 20.12.2024 SB2024122032
SB2024122037
SB2024122038
and 4 more
#VU101882 - Double Free
CVE-2024-35368
CWE-415 High
No
No
7:2.8.17-0ubuntu0.1+esm12, 7:3.4.11-0ubuntu0.1+esm10, 7:4.2.7-0ubuntu0.1+esm10, 7:4.4.2-0ubuntu0.22.04.1+esm9, 7:6.1.1-3ubuntu5+esm5 20.12.2024 SB2024122033
SB2024122037
SB2024122038
and 6 more
#VU95532 - Heap-based Buffer Overflow
CVE-2024-7055
CWE-122 High
No
No
7:2.8.17-0ubuntu0.1+esm12, 7:3.4.11-0ubuntu0.1+esm10, 7:4.2.7-0ubuntu0.1+esm10, 7:4.4.2-0ubuntu0.22.04.1+esm9, 7:6.1.1-3ubuntu5+esm5 08.08.2024 SB2024080811
SB2024080817
SB2024080818
and 8 more
#VU94649 - Memory corruption
CVE-2024-32230
CWE-119 High
No
No
Ubuntu Pro 22.07.2024 SB2024072245
SB2024072246
SB2024072247
and 7 more
#VU89302 - Off-by-one Error
CVE-2024-31585
CWE-193 High
No
No
Ubuntu Pro, 7:6.0-6ubuntu1.1 09.05.2024 SB2024050941
SB2024050946
SB2024050947
and 21 more
#VU89301 - Heap-based Buffer Overflow
CVE-2024-31582
CWE-122 High
No
No
Ubuntu Pro, 7:6.0-6ubuntu1.1 09.05.2024 SB2024050941
SB2024050946
SB2024050947
and 17 more
#VU89299 - Use After Free
CVE-2024-31578
CWE-416 High
No
No
Ubuntu Pro, 7:6.0-6ubuntu1.1 09.05.2024 SB2024050941
SB2024050944
SB2024050946
and 17 more


Showing elements 1 - 20 out of 54