ffmpeg (SUSE:Linux Enterprise Module for Desktop Applications 15 SP7) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 package ffmpeg, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2024-36616 — CVSS 6.5 (medium): An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the…
• CVE-2024-36617 — CVSS 6.2 (medium): FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.
• CVE-2024-36618 — CVSS 6.2 (medium): FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting…
• CVE-2022-1475 — CVSS 5.5 (medium): An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c…
• CVE-2025-7700 — CVSS 5.3 (medium): A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the…