A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libavcodec/pnmdec.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.2 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-273651.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Dec 5, 2025 | Aug 6, 2024 |
| Debian | — | Upgrade ffmpeg | Aug 15, 2024 | Aug 6, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.0.2Upgrade to FFmpeg version 6.1.2Upgrade to FFmpeg version 4.3.8Upgrade to FFmpeg version 4.4.5Upgrade to FFmpeg version 5.1.6Upgrade to FFmpeg version 7.1 | Aug 6, 2024 | Aug 6, 2024 |
| Suse | — | Upgrade libpostproc55_9-32bitUpgrade libswscale5_9Upgrade ffmpeg-4-libswscale-develUpgrade libavutil56_70Upgrade libavfilter7_110Upgrade ffmpeg-4-libavformat-develUpgrade libavformat58_76-32bitUpgrade libswresample3_9-32bitUpgrade ffmpeg-4-libavresample-develUpgrade ffmpeg-4-libswresample-develUpgrade libavformat61Upgrade libpostproc55_9Upgrade ffmpeg-7Upgrade ffmpeg-4-libavfilter-develUpgrade libavdevice61Upgrade libavresample4_0-32bitUpgrade libavcodec61Upgrade libswresample3_9Upgrade libavutil59Upgrade libavdevice58_13Upgrade libavcodec58_134Upgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-4-libavcodec-develUpgrade libavresample4_0Upgrade libswresample5Upgrade libswscale8Upgrade libavdevice58_13-32bitUpgrade ffmpeg-4Upgrade libpostproc58Upgrade libavformat58_76Upgrade libavfilter10Upgrade ffmpeg-4-libpostproc-develUpgrade libavfilter7_110-32bitUpgrade ffmpeg-4-libavdevice-develUpgrade libavutil56_70-32bitUpgrade libavcodec58_134-32bitUpgrade ffmpeg-4-private-develUpgrade libswscale5_9-32bit | Dec 30, 2024 | Aug 6, 2024 |
| Ubuntu | — | Upgrade libavcodec-dev (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro) | Jun 26, 2025 | Aug 6, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub