The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The ff_frame_thread_init function in libavcodec/pthread_frame.c in FFmpeg before 2.7.2 mishandles certain memory-allocation failures, which allows remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via a crafted file, as demonstrated by an AVI file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 20, 2019 | Sep 5, 2015 |
| Ffmpeg | — | Upgrade to FFmpeg version 2.6.4Upgrade to FFmpeg version 2.7.2Upgrade to FFmpeg version 2.4.11Upgrade to FFmpeg version 2.8Upgrade to FFmpeg version 2.5.8 | Sep 29, 2017 | Sep 6, 2015 |
| Freebsd | — | Upgrade libavUpgrade kodiUpgrade ffmpeg1Upgrade ffmpeg-011Upgrade avidemux2Upgrade mencoderUpgrade ffmpeg2Upgrade mythtv-frontendUpgrade mplayerUpgrade ffmpeg24Upgrade gstreamer-ffmpegUpgrade ffmpeg25Upgrade ffmpeg26Upgrade ffmpeg0Upgrade ffmpeg23Upgrade handbrakeUpgrade avidemuxUpgrade ffmpeg-develUpgrade gstreamer1-libavUpgrade plexhometheaterUpgrade mythtvUpgrade avidemux26Upgrade ffmpeg | Dec 10, 2025 | Sep 20, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub