CVS commit: pkgsrc/doc

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/doc
From: "Leonardo Taccari" <leot%netbsd.org@localhost>
Date: Fri, 10 Oct 2025 19:10:17 +0000

Module Name:    pkgsrc
Committed By:   leot
Date:           Fri Oct 10 19:10:16 UTC 2025

Modified Files:
        pkgsrc/doc: pkg-vulnerabilities

Log Message:
pkg-vulnerabilities: add old ffmpeg CVEs

+ ffmpeg


To generate a diff of this commit:
cvs rdiff -u -r1.603 -r1.604 pkgsrc/doc/pkg-vulnerabilities

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/doc/pkg-vulnerabilities
diff -u pkgsrc/doc/pkg-vulnerabilities:1.603 pkgsrc/doc/pkg-vulnerabilities:1.604
--- pkgsrc/doc/pkg-vulnerabilities:1.603        Fri Oct 10 17:56:29 2025
+++ pkgsrc/doc/pkg-vulnerabilities      Fri Oct 10 19:10:16 2025
@@ -1,4 +1,4 @@
-# $NetBSD: pkg-vulnerabilities,v 1.603 2025/10/10 17:56:29 leot Exp $
+# $NetBSD: pkg-vulnerabilities,v 1.604 2025/10/10 19:10:16 leot Exp $
 #
 #FORMAT 1.0.0
 #
@@ -28193,3 +28193,113 @@ exiv2<0.28.2  out-of-bounds-read      https://
 exiv2<0.28.2   denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2024-25112
 expat<2.6.4    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2024-50602
 eza<0.18.2     buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2024-25817
+ffmpeg6<6.0    use-after-free  https://nvd.nist.gov/vuln/detail/CVE-2022-48434
+ffmpeg5<5.1.2  use-after-free  https://nvd.nist.gov/vuln/detail/CVE-2022-48434
+ffmpeg4<4.4.3  use-after-free  https://nvd.nist.gov/vuln/detail/CVE-2022-48434
+ffmpeg6<6.1    out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2023-46407
+ffmpeg6<6.1    buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-47470
+ffmpeg7<7.0    buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-49501
+ffmpeg6<6.1.3  buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-49501
+ffmpeg7<7.0    buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-49502
+ffmpeg6<6.1.3  buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-49502
+ffmpeg5<5.1.7  buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-49502
+ffmpeg4<4.4.6  buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-49502
+ffmpeg3<3.4.14 buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-49502
+ffmpeg7<7.0    buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-49528
+ffmpeg7<7.0    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2023-50007
+ffmpeg6<6.1.3  denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2023-50007
+ffmpeg5<5.1.7  denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2023-50007
+ffmpeg7<7.0    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2023-50008
+ffmpeg6<6.1.3  denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2023-50008
+ffmpeg5<5.1.7  denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2023-50008
+ffmpeg7<7.0    heap-overflow   https://nvd.nist.gov/vuln/detail/CVE-2023-50009
+ffmpeg7<7.0    out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2023-50010
+ffmpeg7<7.0    buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-51791
+ffmpeg7<7.0    buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-51793
+ffmpeg7<7.0    buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-51794
+ffmpeg7<7.0    buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-51795
+ffmpeg7<7.0    buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-51796
+ffmpeg7<7.0    buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-51797
+ffmpeg7<7.0    buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2023-51798
+ffmpeg7<7.1.1  input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6601
+ffmpeg6<6.1    input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6601
+ffmpeg5<5.1.7  input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6601
+ffmpeg8<8.0    input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6602
+ffmpeg7<7.1.1  input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6602
+ffmpeg6<6.1.3  input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6602
+ffmpeg5<5.1.7  input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6602
+ffmpeg4<4.4.6  input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6602
+ffmpeg5<5.0    null-pointer-dereference        https://nvd.nist.gov/vuln/detail/CVE-2023-6603
+ffmpeg8<8.0    input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6604
+ffmpeg7<7.1.1  input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6604
+ffmpeg6<6.1.3  input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6604
+ffmpeg5<5.1.7  input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6604
+ffmpeg4<4.4.6  input-validation        https://nvd.nist.gov/vuln/detail/CVE-2023-6604
+ffmpeg8<8.0    server-side-request-forgery     https://nvd.nist.gov/vuln/detail/CVE-2023-6605
+ffmpeg7<7.1.1  server-side-request-forgery     https://nvd.nist.gov/vuln/detail/CVE-2023-6605
+ffmpeg6<6.1.3  server-side-request-forgery     https://nvd.nist.gov/vuln/detail/CVE-2023-6605
+ffmpeg4<4.4.6  server-side-request-forgery     https://nvd.nist.gov/vuln/detail/CVE-2023-6605
+ffmpeg6<6.1    integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-22860
+ffmpeg6<6.1    integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-22861
+ffmpeg6<6.1    arbitrary-code-execution        https://nvd.nist.gov/vuln/detail/CVE-2024-22862
+ffmpeg7<7.0    use-after-free  https://nvd.nist.gov/vuln/detail/CVE-2024-31578
+ffmpeg6<6.1.3  use-after-free  https://nvd.nist.gov/vuln/detail/CVE-2024-31578
+ffmpeg7<7.0    input-validation        https://nvd.nist.gov/vuln/detail/CVE-2024-31581
+ffmpeg7<7.0    heap-overflow   https://nvd.nist.gov/vuln/detail/CVE-2024-31582
+ffmpeg6<6.1.3  heap-overflow   https://nvd.nist.gov/vuln/detail/CVE-2024-31582
+ffmpeg5<5.1.7  heap-overflow   https://nvd.nist.gov/vuln/detail/CVE-2024-31582
+ffmpeg7<7.0    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2024-31585
+ffmpeg7<7.0.1  buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2024-32228
+ffmpeg<7.1     buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2024-32229
+ffmpeg7<7.1    buffer-overflow https://nvd.nist.gov/vuln/detail/CVE-2024-32230
+ffmpeg7<7.0    double-free     https://nvd.nist.gov/vuln/detail/CVE-2024-35365
+ffmpeg7<7.0    integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-35366
+ffmpeg7<7.0    out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2024-35367
+ffmpeg6<6.1.3  out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2024-35367
+ffmpeg5<5.1.7  out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2024-35367
+ffmpeg7<7.1    double-free     https://nvd.nist.gov/vuln/detail/CVE-2024-35368
+ffmpeg6<6.1.3  double-free     https://nvd.nist.gov/vuln/detail/CVE-2024-35368
+ffmpeg5<5.1.7  double-free     https://nvd.nist.gov/vuln/detail/CVE-2024-35368
+ffmpeg7<7.0    input-validation        https://nvd.nist.gov/vuln/detail/CVE-2024-35369
+ffmpeg7<7.0    integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36613
+ffmpeg5<5.1.5  integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36613
+ffmpeg4<4.3.7  integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36613
+ffmpeg7<7.1    race-condition  https://nvd.nist.gov/vuln/detail/CVE-2024-36615
+ffmpeg7<7.0    integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36616
+ffmpeg5<5.1.5  integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36616
+ffmpeg4<4.3.7  integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36616
+ffmpeg7<7.0    integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36617
+ffmpeg6<6.1.2  integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36617
+ffmpeg5<5.1.5  integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36617
+ffmpeg4<4.4.5  integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36617
+ffmpeg3<3.4.14 integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36617
+ffmpeg7<7.0    integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36618
+ffmpeg7<7.1    integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2024-36619
+ffmpeg7<7.1.1  null-pointer-dereference        https://nvd.nist.gov/vuln/detail/CVE-2024-55069
+ffmpeg7<7.0.2  heap-overflow   https://nvd.nist.gov/vuln/detail/CVE-2024-7055
+ffmpeg6<6.0    heap-overflow   https://nvd.nist.gov/vuln/detail/CVE-2024-7272
+ffmpeg5<5.1.6  heap-overflow   https://nvd.nist.gov/vuln/detail/CVE-2024-7272
+ffmpeg8<8.0    out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2025-0518
+ffmpeg7<7.1.1  out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2025-0518
+ffmpeg6<6.1.3  out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2025-0518
+ffmpeg5<5.1.7  out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2025-0518
+ffmpeg4<4.4.6  out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2025-0518
+ffmpeg3<3.4.14 out-of-bounds-read      https://nvd.nist.gov/vuln/detail/CVE-2025-0518
+ffmpeg8<8.0    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-1373
+ffmpeg8<8.0    stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2025-1594
+ffmpeg7<7.1.2  stack-overflow  https://nvd.nist.gov/vuln/detail/CVE-2025-1594
+ffmpeg8<8.0    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-1816
+ffmpeg7<7.1.1  denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-1816
+ffmpeg8<8.0    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-22919
+ffmpeg7<7.1.1  denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-22919
+ffmpeg6<6.1.3  denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-22919
+ffmpeg5<5.1.7  denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-22919
+ffmpeg4<4.4.6  denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-22919
+ffmpeg8<8.0    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-22920
+ffmpeg8<8.0    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-22921
+ffmpeg8<8.0    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-25468
+ffmpeg8<8.0    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2025-25469
+ffmpeg8<8.0    null-pointer-dereference        https://nvd.nist.gov/vuln/detail/CVE-2025-25471
+ffmpeg8<8.0    null-pointer-dereference        https://nvd.nist.gov/vuln/detail/CVE-2025-25473
+ffmpeg4<4.4    denial-of-service       https://nvd.nist.gov/vuln/detail/CVE-2020-36138
+ffmpeg4<4.3.3  integer-overflow        https://nvd.nist.gov/vuln/detail/CVE-2021-28429

Prev by Date: CVS commit: pkgsrc/doc
Next by Date: CVS commit: pkgsrc/security/pgp2
Previous by Thread: CVS commit: pkgsrc/doc
Next by Thread: CVS commit: pkgsrc/security/pgp2
Indexes:

Home | Main Index | Thread Index | Old Index