ffmpeg (SUSE:Linux Enterprise Workstation Extension 15 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Workstation Extension 15 SP4 package ffmpeg, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2022-48434 — CVSS 8.1 (high): libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which…
• CVE-2022-3109 — CVSS 7.5 (high): An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc()…
• CVE-2019-13390 — CVSS 6.5 (medium): In FFmpeg 4.1.3, there is a division by zero at adx_write_trailer in libavformat/rawenc.c.
• CVE-2021-28429 — CVSS 5.5 (medium): Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause…
• CVE-2022-3341 — CVSS 5.3 (medium): A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs…