CVE-2009-4637
NoneCVSS
—
EPSS
17.4%
Published
Feb 10, 2010
CISA due date
—
The record
FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a stack-based buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | ffmpeg | 0 | 4:0.5+svn20090706-3 |
| Debian:12 | ffmpeg | 0 | 4:0.5+svn20090706-3 |
| Debian:13 | ffmpeg | 0 | 4:0.5+svn20090706-3 |
| Debian:5.0 | ffmpeg-debian | 0 | 0.svn20080206-18+lenny1 |
Related vulnerabilities
- CVE-2025-0518 Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive… Also affects ffmpeg
- CVE-2023-6601 A flaw was found in FFmpeg's HLS demuxer. Also affects ffmpeg
- CVE-2023-6604 A flaw was found in FFmpeg. Also affects ffmpeg
- CVE-2023-6605 A flaw was found in FFmpeg's DASH playlist support. Also affects ffmpeg
- CVE-2024-36613 FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing… Also affects ffmpeg
- CVE-2023-6603 A flaw was found in FFmpeg's HLS playlist parsing. Also affects ffmpeg
- CVE-2023-6602 A flaw was found in FFmpeg's TTY Demuxer. Also affects ffmpeg
- CVE-2024-35368 FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within… Also affects ffmpeg