Linux · SUSE Linux Enterprise · Security advisory · March 14, 2025
SUSE-SU-2025:0862-1: ffmpeg-4 security update
SUSE-SU-2025:0862-1, released March 14, 2025, fixes 15 CVEs in ffmpeg-4 (version 4.4.5-150600.13.16.1). None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
15
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0155
75th percentile
Priority of the 15 CVEs
Patch now 0
Urgent 1
High 8
Routine 6
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ffmpeg-4 | opensuse-leap 15.6 | 4.4.5-150600.13.16.1 |
| ffmpeg-4 | sles 15.6 | 4.4.5-150600.13.16.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2024-35368 | ffmpeg-4: Security update for ffmpeg-4 | 9.8 | 0.0071 | None reported |
| High | CVE-2023-49502 | ffmpeg: Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via th... | 8.8 | 0.0155 | None reported |
| High | CVE-2024-7055 | ffmpeg-4: Fixed heap-based buffer overflow in pnmdec.c (bsc#1229026). | 8.8 | 0.0144 | None reported |
| High | CVE-2024-31578 | ffmpeg-4: Fixed heap use-after-free via the av_hwframe_ctx_init function (bsc#1223070). | 7.5 | 0.0118 | None reported |
| High | CVE-2023-50010 | ffmpeg: Fixed an arbitrary code execution via the set_encoder_id() (bsc#1223256). | 7.8 | 0.0048 | None reported |
| High | CVE-2024-32230 | ffmpeg: Fixed buffer overflow due to negative-size-param bug at libavcodec/mpegvideo_enc.c in load_input_picture (bsc#1227296) | 7.8 | 0.0035 | None reported |
| High | CVE-2023-51793 | ffmpeg: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via t... | 7.8 | 0.0032 | None reported |
| High | CVE-2023-51798 | ffmpeg: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via a... | 7.8 | 0.0032 | None reported |
| High | CVE-2023-51794 | ffmpeg: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via t... | 7.8 | 0.0022 | None reported |
| Routine | CVE-2025-22919 | ffmpeg: Check for valid sample rate, to fix the invalid sample rate >= 0 | 6.5 | 0.0042 | None reported |
| Routine | CVE-2025-25473 | ffmpeg-4: Fixed memory leak in avformat_free_context() (bsc#1237351). | 5.3 | 0.0042 | None reported |
| Routine | CVE-2025-0518 | ffmpeg: Fix memory data leak when use sscanf() | 5.3 | 0.0038 | None reported |
| Routine | CVE-2025-22921 | ffmpeg: FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain asegmentation violation via the component /libavcode... | 6.5 | 0.0037 | None reported |
| Routine | CVE-2024-36613 | ffmpeg: Adjust order of operations around block align | 6.2 | 0.0028 | None reported |
| Routine | CVE-2024-12361 | ffmpeg: Add check for av_packet_new_side_data() to avoid null pointer dereference if allocation fails | n/a | n/a | None reported |
Showing 1 to 15 of 15
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.