ffmpeg-4: This update for ffmpeg-4 fixes the following issues: - CVE-2025-22921: Fixed segmentation violation in NULL pointe...
CVE-2023-49502 is fixed in 39 products on 1 platform, first by ffmpeg 7:6.1.1-3ubuntu5+esm1, released April 19, 2024. It is not reported as exploited. Patch Radar priority: High.
This update for ffmpeg-4 fixes the following issues: - CVE-2025-22921: Fixed segmentation violation in NULL pointer dereference via the component /libavcodec/jpeg2000dec.c (bsc#1237382). - CVE-2025-25473: Fixed memory leak in avformat_free_context() (bsc#1237351). - CVE-2025-0518: Fixed unchecked sscanf return value which leads to memory data leak (bsc#1236007). - CVE-2025-22919: Fixed denial of service (DoS) via opening a crafted AAC file (bsc#1237371). - CVE-2024-12361: Fixed NULL Pointer Dereference (bsc#1237358). - CVE-2024-35368: Fixed Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c (bsc#1234028). - CVE-2024-36613: Fixed Integer overflow in ffmpeg (bsc#1235092). - CVE-2023-50010: Fixed arbitrary code execution via the set_encoder_id function in /fftools/ffmpeg_enc.c component (bsc#1223256). - CVE-2023-51794: Fixed heap-buffer-overflow at libavfilter/af_stereowiden.c (bsc#1223437). - CVE-2023-51793: Fixed heap buffer overflow in the image_copy_plane function in libavutil/imgutils.c (bsc#1223272). - CVE-2023-49502: Fixed heap buffer overflow via the ff_bwdif_filter_intra_c function in libavfilter/bwdifdsp.c (bsc#1223235). - CVE-2023-51798: Fixed floating point exception(FPE) via the interpolate function in libavfilter/vf_minterpolate.c (bsc#1223304). - CVE-2024-31578: Fixed heap use-after-free via the av_hwframe_ctx_init function (bsc#1223070). - CVE-2024-7055: Fixed heap-based buffer overflow in pnmdec.c (bsc#1229026). - CVE-2024-32230: Fixed buffer overflow due to negative-size-param bug at libavcodec/mpegvideo_enc.c in load_input_picture (bsc#1227296). Other fixes: - Updated to version 4.4.5.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| ffmpeg · Debian 11.6 (bullseye) | 7:4.3.8-0+deb11u1 | DLA-3928-1 | Oct 21, 2024 |
| ffmpeg · Debian 12.15 (bookworm) | 7:5.1.7-0+deb12u1 | DSA-5985-1 | Aug 25, 2025 |
| ffmpeg · Debian 13.5 (trixie) | 7:7.0.1-3 | DEBIAN-CVE-2023-49502 | Apr 19, 2024 |
| ffmpeg · Debian 14 | 7:7.0.1-3 | DEBIAN-CVE-2023-49502 | Apr 19, 2024 |
| ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | ffmpeg 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| ffmpeg · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | ffmpeg 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| ffmpeg · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | ffmpeg 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| ffmpeg · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | ffmpeg 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| ffmpeg-4 · opensuse-leap 15.6 | 4.4.5-150600.13.16.1 | SUSE-SU-2025:0862-1 | Mar 14, 2025 |
| ffmpeg-4 · sles 15.6 | 4.4.5-150600.13.16.1 | SUSE-SU-2025:0862-1 | Mar 14, 2025 |
| libavcodec-extra · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libavcodec-extra 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavcodec-extra · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libavcodec-extra 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavcodec-extra · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libavcodec-extra 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libavcodec-extra · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libavcodec-extra 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libavcodec-extra57 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libavcodec-extra57 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavcodec-extra58 · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libavcodec-extra58 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavcodec-extra58 · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libavcodec-extra58 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libavcodec-extra60 · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libavcodec-extra60 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libavcodec57 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libavcodec57 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavcodec58 · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libavcodec58 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavcodec58 · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libavcodec58 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libavcodec60 · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libavcodec60 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libavdevice57 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libavdevice57 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavdevice58 · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libavdevice58 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavdevice58 · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libavdevice58 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libavdevice60 · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libavdevice60 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libavfilter-extra · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libavfilter-extra 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavfilter-extra · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libavfilter-extra 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavfilter-extra · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libavfilter-extra 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libavfilter-extra · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libavfilter-extra 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libavfilter-extra6 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libavfilter-extra6 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavfilter-extra7 · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libavfilter-extra7 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavfilter-extra7 · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libavfilter-extra7 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libavfilter-extra9 · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libavfilter-extra9 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libavfilter6 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libavfilter6 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavfilter7 · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libavfilter7 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavfilter7 · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libavfilter7 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libavfilter9 · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libavfilter9 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libavformat-extra · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libavformat-extra 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libavformat-extra · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libavformat-extra 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libavformat-extra58 · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libavformat-extra58 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libavformat-extra60 · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libavformat-extra60 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libavformat57 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libavformat57 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavformat58 · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libavformat58 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavformat58 · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libavformat58 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libavformat60 · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libavformat60 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libavresample3 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libavresample3 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavresample4 · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libavresample4 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavutil55 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libavutil55 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavutil56 · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libavutil56 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libavutil56 · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libavutil56 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libavutil58 · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libavutil58 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libpostproc54 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libpostproc54 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libpostproc55 · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libpostproc55 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libpostproc55 · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libpostproc55 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libpostproc57 · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libpostproc57 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libswresample2 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libswresample2 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libswresample3 · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libswresample3 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libswresample3 · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libswresample3 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libswresample4 · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libswresample4 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
| libswscale4 · Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1+esm5 | libswscale4 7:3.4.11-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libswscale5 · Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1+esm5 | libswscale5 7:4.2.7-0ubuntu0.1+esm5 | Apr 26, 2024 |
| libswscale5 · Ubuntu 22.04.1 LTS (jammy) | 7:4.4.2-0ubuntu0.22.04.1+esm4 | libswscale5 7:4.4.2-0ubuntu0.22.04.1+esm4 | Apr 26, 2024 |
| libswscale7 · Ubuntu 24.04.5 LTS (noble) | 7:6.1.1-3ubuntu5+esm1 | libswscale7 7:6.1.1-3ubuntu5+esm1 | Apr 19, 2024 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.