ffmpeg:Digital VCR and streaming server

Star1
26
代码
代码
Issues14
Pull Requests3
项目讨论
Wiki
分析
Star1
26

Digital VCR and streaming server

分支38Tags87
文件最后提交记录最后更新时间
.gitattributes
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
.lfsconfig
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
CVE-2020-21041.patch
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
CVE-2020-22023.patch
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
CVE-2020-22024.patch
fix CVE-2025-9951, CVE-2020-22024, CVE-2020-22028, CVE-2020-22035, CVE-2020-22041, CVE-2020-22048, CVE-2020-22056 (cherry picked from commit c4452a0542ffd52572c6288593be0ead6fceac2f)
1 个月前
CVE-2020-22028.patch
fix CVE-2025-9951, CVE-2020-22024, CVE-2020-22028, CVE-2020-22035, CVE-2020-22041, CVE-2020-22048, CVE-2020-22056 (cherry picked from commit c4452a0542ffd52572c6288593be0ead6fceac2f)
1 个月前
CVE-2020-22031.patch
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
CVE-2020-22032.patch
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
CVE-2020-22035.patch
fix CVE-2025-9951, CVE-2020-22024, CVE-2020-22028, CVE-2020-22035, CVE-2020-22041, CVE-2020-22048, CVE-2020-22056 (cherry picked from commit c4452a0542ffd52572c6288593be0ead6fceac2f)
1 个月前
CVE-2020-22036.patch
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
CVE-2020-22040.patch
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
CVE-2020-22041.patch
fix CVE-2025-9951, CVE-2020-22024, CVE-2020-22028, CVE-2020-22035, CVE-2020-22041, CVE-2020-22048, CVE-2020-22056 (cherry picked from commit c4452a0542ffd52572c6288593be0ead6fceac2f)
1 个月前
CVE-2020-22048.patch
fix CVE-2025-9951, CVE-2020-22024, CVE-2020-22028, CVE-2020-22035, CVE-2020-22041, CVE-2020-22048, CVE-2020-22056 (cherry picked from commit c4452a0542ffd52572c6288593be0ead6fceac2f)
1 个月前
CVE-2020-22056.patch
fix CVE-2025-9951, CVE-2020-22024, CVE-2020-22028, CVE-2020-22035, CVE-2020-22041, CVE-2020-22048, CVE-2020-22056 (cherry picked from commit c4452a0542ffd52572c6288593be0ead6fceac2f)
1 个月前
CVE-2020-35964.patch
sync openEuler-20.03-LTS-SP1 to openEuler-20.03-LTS-SP4
2 年前
CVE-2020-35965.patch
fix CVE-2025-9951, CVE-2020-22024, CVE-2020-22028, CVE-2020-22035, CVE-2020-22041, CVE-2020-22048, CVE-2020-22056 (cherry picked from commit c4452a0542ffd52572c6288593be0ead6fceac2f)
1 个月前
CVE-2021-28429.patch
sync CVE-2021-28429.patch CVE-2021-38171.patch CVE-2022-3109.patch CVE-2022-3341.patch and modify changelog in line with 22.03
2 年前
CVE-2021-3566.patch
Fix CVE-2021-3566 and CVE-2021-38291 (cherry picked from commit af3bbfe20c302c939d75cbd05b1bbd4fcaefdd59)
4 年前
CVE-2021-38114.patch
sync openEuler-20.03-LTS-SP1 to openEuler-20.03-LTS-SP4
2 年前
CVE-2021-38171.patch
sync CVE-2021-28429.patch CVE-2021-38171.patch CVE-2022-3109.patch CVE-2022-3341.patch and modify changelog in line with 22.03
2 年前
CVE-2021-38291.patch
Fix CVE-2021-3566 and CVE-2021-38291 (cherry picked from commit af3bbfe20c302c939d75cbd05b1bbd4fcaefdd59)
4 年前
CVE-2022-1475.patch
fix CVE-2022-1475 (cherry picked from commit 95ec0b8c9642bde6f5ecba0d632d9b69035f838a)
2 年前
CVE-2022-3109.patch
sync CVE-2021-28429.patch CVE-2021-38171.patch CVE-2022-3109.patch CVE-2022-3341.patch and modify changelog in line with 22.03
2 年前
CVE-2022-3341.patch
sync CVE-2021-28429.patch CVE-2021-38171.patch CVE-2022-3109.patch CVE-2022-3341.patch and modify changelog in line with 22.03
2 年前
CVE-2022-48434.patch
CVE-2022-48434 (cherry picked from commit ec3a427292b383c3db2ae16d74c14669c16aeafd)
2 年前
CVE-2023-51794.patch
sync openEuler-20.03-LTS-SP1 to openEuler-20.03-LTS-SP4
2 年前
CVE-2023-6602.patch
fix: 修复 CVE-2023-6602（HLS TTY Demuxer 数据外泄 / DASH SSRF） - 回移植上游 avformat/hls: Be more picky on extensions（91d96dc8） - 回移植上游 avformat/dashdec: Check whitelist（4c96d6bf） - 上游 ff_match_url_ext 依赖 ff_url_decompose（仅 4.3+ 可用）， 以本地 match_url_ext 辅助函数替代，语义一致 - spec 增加 CVE-2023-6602.patch，Release 46 -> 47 Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit ea54c3d3c235af154c7ccf5c9e2c7046d5852167)
26 天前
CVE-2023-6603.patch
fix CVE-2025-10256, CVE-2023-6603, CVE-2025-7700 (cherry picked from commit e51322b1844bd703b9d621aa830f88d3d50defe2)
1 个月前
CVE-2024-31578.patch
sync openEuler-20.03-LTS-SP1 to openEuler-20.03-LTS-SP4
2 年前
CVE-2025-0518.patch
fix CVE-2025-0518, CVE-2025-1594 (cherry picked from commit 7d6308830a0d70f7f74b9e88f5d464297d0ff87d)
2 个月前
CVE-2025-10256.patch
fix CVE-2025-10256, CVE-2023-6603, CVE-2025-7700 (cherry picked from commit e51322b1844bd703b9d621aa830f88d3d50defe2)
1 个月前
CVE-2025-1594.patch
fix CVE-2025-0518, CVE-2025-1594 (cherry picked from commit 7d6308830a0d70f7f74b9e88f5d464297d0ff87d)
2 个月前
CVE-2025-63757.patch
fix CVE-2025-63757 (cherry picked from commit ed86ecde0e7f01c1c04d3e4de1ad91e4dbf04156)
1 个月前
CVE-2025-7700.patch
fix CVE-2025-10256, CVE-2023-6603, CVE-2025-7700 (cherry picked from commit e51322b1844bd703b9d621aa830f88d3d50defe2)
1 个月前
CVE-2025-9951.patch
fix CVE-2025-9951, CVE-2020-22024, CVE-2020-22028, CVE-2020-22035, CVE-2020-22041, CVE-2020-22048, CVE-2020-22056 (cherry picked from commit c4452a0542ffd52572c6288593be0ead6fceac2f)
1 个月前
CVE-2026-18393.patch
fix CVE-2026-18393, CVE-2026-38343, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348 and CVE-2026-38349 Backport 7 upstream fixes from release/4.4 (n4.4) to fix DoS vulnerabilities in ffmpeg 4.2.4: - CVE-2026-18393: avcodec/tdsc remove double stride adjustment (8027aa35a8) - CVE-2026-38343: avfilter/vf_scale integer overflow in config_props (007877d3d0, adapted for 4.2.4 local w/h vars) - CVE-2026-38344: swscale/utils initialize chroma when luma switched to cascade (d0d34fca71) - CVE-2026-38346: swscale/output integer overflow in yuv2planeX_8_c (72b2d5791b) - CVE-2026-38347: swscale/alphablend overread alpha plane on subsampled odd size (48603149f1, adapted for 4.2.4 y loop) - CVE-2026-38348: swscale/utils signed integer overflow in *Inc (9dd5bd8fde) - CVE-2026-38349: swscale/output integer overflow in yuv2rgba64_1_c_template (241530f9be, adapted for 4.2.4 "<< 11" form) Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit 2a4baf0ed01971702772f324a127bb451d9d3d2e)
5 天前
CVE-2026-30998.patch
fix CVE-2026-30998, CVE-2026-64833, CVE-2026-64834, CVE-2026-66036 and CVE-2026-66039 Apply upstream fixes for the following vulnerabilities: - CVE-2026-30998: tools/zmqsend: close the input FILE - CVE-2026-64833: avformat/spdifenc: bound DTS core_size against the packet size in the HD path - CVE-2026-64834: avformat/rtpdec_asf: reject ASF objects smaller than their header - CVE-2026-66036: avfilter/vf_hqdn3d: support dynamic frame sizes - CVE-2026-66039: avcodec/mace: reject sample counts that overflow int Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit a8ed3484618e22b49574e92b489d3856284b4794)
16 天前
CVE-2026-30999.patch
fix CVE-2026-6385, CVE-2026-30999 (cherry picked from commit b12cea39d1bf772c276fc7642f02a5855ec1ef76)
2 个月前
CVE-2026-38343.patch
fix CVE-2026-18393, CVE-2026-38343, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348 and CVE-2026-38349 Backport 7 upstream fixes from release/4.4 (n4.4) to fix DoS vulnerabilities in ffmpeg 4.2.4: - CVE-2026-18393: avcodec/tdsc remove double stride adjustment (8027aa35a8) - CVE-2026-38343: avfilter/vf_scale integer overflow in config_props (007877d3d0, adapted for 4.2.4 local w/h vars) - CVE-2026-38344: swscale/utils initialize chroma when luma switched to cascade (d0d34fca71) - CVE-2026-38346: swscale/output integer overflow in yuv2planeX_8_c (72b2d5791b) - CVE-2026-38347: swscale/alphablend overread alpha plane on subsampled odd size (48603149f1, adapted for 4.2.4 y loop) - CVE-2026-38348: swscale/utils signed integer overflow in *Inc (9dd5bd8fde) - CVE-2026-38349: swscale/output integer overflow in yuv2rgba64_1_c_template (241530f9be, adapted for 4.2.4 "<< 11" form) Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit 2a4baf0ed01971702772f324a127bb451d9d3d2e)
5 天前
CVE-2026-38344.patch
fix CVE-2026-18393, CVE-2026-38343, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348 and CVE-2026-38349 Backport 7 upstream fixes from release/4.4 (n4.4) to fix DoS vulnerabilities in ffmpeg 4.2.4: - CVE-2026-18393: avcodec/tdsc remove double stride adjustment (8027aa35a8) - CVE-2026-38343: avfilter/vf_scale integer overflow in config_props (007877d3d0, adapted for 4.2.4 local w/h vars) - CVE-2026-38344: swscale/utils initialize chroma when luma switched to cascade (d0d34fca71) - CVE-2026-38346: swscale/output integer overflow in yuv2planeX_8_c (72b2d5791b) - CVE-2026-38347: swscale/alphablend overread alpha plane on subsampled odd size (48603149f1, adapted for 4.2.4 y loop) - CVE-2026-38348: swscale/utils signed integer overflow in *Inc (9dd5bd8fde) - CVE-2026-38349: swscale/output integer overflow in yuv2rgba64_1_c_template (241530f9be, adapted for 4.2.4 "<< 11" form) Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit 2a4baf0ed01971702772f324a127bb451d9d3d2e)
5 天前
CVE-2026-38346.patch
fix CVE-2026-18393, CVE-2026-38343, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348 and CVE-2026-38349 Backport 7 upstream fixes from release/4.4 (n4.4) to fix DoS vulnerabilities in ffmpeg 4.2.4: - CVE-2026-18393: avcodec/tdsc remove double stride adjustment (8027aa35a8) - CVE-2026-38343: avfilter/vf_scale integer overflow in config_props (007877d3d0, adapted for 4.2.4 local w/h vars) - CVE-2026-38344: swscale/utils initialize chroma when luma switched to cascade (d0d34fca71) - CVE-2026-38346: swscale/output integer overflow in yuv2planeX_8_c (72b2d5791b) - CVE-2026-38347: swscale/alphablend overread alpha plane on subsampled odd size (48603149f1, adapted for 4.2.4 y loop) - CVE-2026-38348: swscale/utils signed integer overflow in *Inc (9dd5bd8fde) - CVE-2026-38349: swscale/output integer overflow in yuv2rgba64_1_c_template (241530f9be, adapted for 4.2.4 "<< 11" form) Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit 2a4baf0ed01971702772f324a127bb451d9d3d2e)
5 天前
CVE-2026-38347.patch
fix CVE-2026-18393, CVE-2026-38343, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348 and CVE-2026-38349 Backport 7 upstream fixes from release/4.4 (n4.4) to fix DoS vulnerabilities in ffmpeg 4.2.4: - CVE-2026-18393: avcodec/tdsc remove double stride adjustment (8027aa35a8) - CVE-2026-38343: avfilter/vf_scale integer overflow in config_props (007877d3d0, adapted for 4.2.4 local w/h vars) - CVE-2026-38344: swscale/utils initialize chroma when luma switched to cascade (d0d34fca71) - CVE-2026-38346: swscale/output integer overflow in yuv2planeX_8_c (72b2d5791b) - CVE-2026-38347: swscale/alphablend overread alpha plane on subsampled odd size (48603149f1, adapted for 4.2.4 y loop) - CVE-2026-38348: swscale/utils signed integer overflow in *Inc (9dd5bd8fde) - CVE-2026-38349: swscale/output integer overflow in yuv2rgba64_1_c_template (241530f9be, adapted for 4.2.4 "<< 11" form) Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit 2a4baf0ed01971702772f324a127bb451d9d3d2e)
5 天前
CVE-2026-38348.patch
fix CVE-2026-18393, CVE-2026-38343, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348 and CVE-2026-38349 Backport 7 upstream fixes from release/4.4 (n4.4) to fix DoS vulnerabilities in ffmpeg 4.2.4: - CVE-2026-18393: avcodec/tdsc remove double stride adjustment (8027aa35a8) - CVE-2026-38343: avfilter/vf_scale integer overflow in config_props (007877d3d0, adapted for 4.2.4 local w/h vars) - CVE-2026-38344: swscale/utils initialize chroma when luma switched to cascade (d0d34fca71) - CVE-2026-38346: swscale/output integer overflow in yuv2planeX_8_c (72b2d5791b) - CVE-2026-38347: swscale/alphablend overread alpha plane on subsampled odd size (48603149f1, adapted for 4.2.4 y loop) - CVE-2026-38348: swscale/utils signed integer overflow in *Inc (9dd5bd8fde) - CVE-2026-38349: swscale/output integer overflow in yuv2rgba64_1_c_template (241530f9be, adapted for 4.2.4 "<< 11" form) Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit 2a4baf0ed01971702772f324a127bb451d9d3d2e)
5 天前
CVE-2026-38349.patch
fix CVE-2026-18393, CVE-2026-38343, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348 and CVE-2026-38349 Backport 7 upstream fixes from release/4.4 (n4.4) to fix DoS vulnerabilities in ffmpeg 4.2.4: - CVE-2026-18393: avcodec/tdsc remove double stride adjustment (8027aa35a8) - CVE-2026-38343: avfilter/vf_scale integer overflow in config_props (007877d3d0, adapted for 4.2.4 local w/h vars) - CVE-2026-38344: swscale/utils initialize chroma when luma switched to cascade (d0d34fca71) - CVE-2026-38346: swscale/output integer overflow in yuv2planeX_8_c (72b2d5791b) - CVE-2026-38347: swscale/alphablend overread alpha plane on subsampled odd size (48603149f1, adapted for 4.2.4 y loop) - CVE-2026-38348: swscale/utils signed integer overflow in *Inc (9dd5bd8fde) - CVE-2026-38349: swscale/output integer overflow in yuv2rgba64_1_c_template (241530f9be, adapted for 4.2.4 "<< 11" form) Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit 2a4baf0ed01971702772f324a127bb451d9d3d2e)
5 天前
CVE-2026-40962.patch
Fix CVE-2026-40962 in ffmpeg 4.2.4 (cherry picked from commit a0695f027bb54a9aa25e794356572e751664ed75)
1 个月前
CVE-2026-58049.patch
fix CVE-2026-64830, CVE-2026-58049 Fixes: heap buffer overflow in VobSub demuxer Reuse subtitle streams and bound the stream count (backport from upstream commit dbd495f066a85ba96b17433f4306582aa37c3951) Fixes: out-of-bounds write in RASC decoder decode_dlta Check that 32-bit DLTA accesses stay within the row (backport from upstream commit 11ff18a6c80187405fc492f9bb07ba9f2f663f76) Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit de7272c0f4446ce7c50f3ca6943df374b20d25aa)
18 天前
CVE-2026-6385.patch
fix CVE-2026-6385, CVE-2026-30999 (cherry picked from commit b12cea39d1bf772c276fc7642f02a5855ec1ef76)
2 个月前
CVE-2026-64830.patch
fix CVE-2026-64830, CVE-2026-58049 Fixes: heap buffer overflow in VobSub demuxer Reuse subtitle streams and bound the stream count (backport from upstream commit dbd495f066a85ba96b17433f4306582aa37c3951) Fixes: out-of-bounds write in RASC decoder decode_dlta Check that 32-bit DLTA accesses stay within the row (backport from upstream commit 11ff18a6c80187405fc492f9bb07ba9f2f663f76) Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit de7272c0f4446ce7c50f3ca6943df374b20d25aa)
18 天前
CVE-2026-70630.patch
fix cve-2026-70630 (cherry picked from commit f3ea2a06fed760c1aaf4f75ce51eb16a50d98f59)
17 天前
Fix-CVE-2026-12706.patch
Fix CVE-2026-8461 CVE-2026-12706 (cherry picked from commit 0117516cbe9725e3a0cc4fa0fb9fff3a3fb68f43)
2 个月前
Fix-CVE-2026-8461.patch
Fix CVE-2026-8461 CVE-2026-12706 (cherry picked from commit 0117516cbe9725e3a0cc4fa0fb9fff3a3fb68f43)
2 个月前
README.en.md
Initial commit
5 年前
README.md
Initial commit
5 年前
backport-CVE-2020-20445.patch
fix(cve): CVE-2020-20445 Fix CVE-2020-20445: Divide By Zero in libavcodec/lpc.h - Add backport patch from upstream commit 38d18fb5 - Fix division by zero in compute_ref_coefs function - Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-20445 - Reference: https://trac.ffmpeg.org/ticket/7996 Closes: https://atomgit.com/src-openeuler/ffmpeg/issues/130
3 个月前
backport-CVE-2020-20446.patch
fix(cve): CVE-2020-20446 Closes #129 - fix divide by zero in libavcodec/aacpsy.c - Backport upstream commit 223b5e8a - Patch36: backport-CVE-2020-20446.patch
3 个月前
backport-CVE-2020-20450.patch
fix(cve): CVE-2020-20450 - Type: CVE - CVE ID: CVE-2020-20450 - CVSS: 7.5 High (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) - DESC: mxfenc: never set codec_ul UID to NULL to prevent null pointer dereference in libavformat/aviobuf.c which could cause Denial of Service - Reference: https://trac.ffmpeg.org/ticket/7993 - Upstream commit: 5400e4a50c61e53e1bc50b3e77201649bbe9c510 Closes #126
3 个月前
backport-CVE-2020-20451.patch
fix(cve): CVE-2020-20451 - fix memory leak in open_files when parsing options fails - backport upstream commit 21265f42ecb265debe9fec1dbfd0cb7de5a8aefb - add backport-CVE-2020-20451.patch - Closes #122
3 个月前
backport-CVE-2020-20453.patch
fix(cve): CVE-2020-20453 Fix divide by zero in libavcodec/aacenc.c (aac_encode_frame). Avoid 0 lambda by using av_clipf with FLT_MIN lower bound. Upstream commit: a7a7f32c8ad0179a1a85d0a8cff35924e6d90be8 Fixes: Ticket8003 Closes #131
3 个月前
backport-CVE-2020-22015.patch
fix(cve): CVE-2020-22015 - Backport upstream fix for buffer overflow in mov_write_video_tag - Upstream commit: 4c1afa292520329eecd1cc7631bc59a8cca95c46 - Fixes #128 Closes #128 (cherry picked from commit 08412545d675a42d4585a58275a4ba7c0a15ea3e)
3 个月前
backport-CVE-2020-22017.patch
fix(cve): CVE-2020-22017 Backport upstream commit d4d6b7b035 to fix heap buffer overflow in avfilter/vf_datascope.c oscilloscope_filter_frame function. Fixes #8309 Closes https://atomgit.com/src-openeuler/ffmpeg/issues/120
3 个月前
backport-CVE-2020-22022.patch
fix(cve): CVE-2020-22022 - Backport upstream fix for heap-buffer overflow in vf_fieldorder.c - Upstream commit: 07050d7bdc32d82e53ee5bb727f5882323d00dba - Fixes #127 Closes #127
3 个月前
backport-CVE-2020-22025.patch
fix(cve): CVE-2020-22025 check if height is big enough in gaussian_blur to prevent heap buffer overflow Upstream commit: ccf4ab8c9aca0aee66bcc2914031a9c97ac0eeb8 Fixes: trac.ffmpeg.org/ticket/8260 Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-22025 Closes #123
3 个月前
backport-CVE-2020-22027.patch
fix(cve): CVE-2020-22027 Closes #132 Add backport patch to fix heap-based buffer overflow in libavfilter/vf_neighbor.c deflate16 function. The vulnerability occurs when image width is 1, causing out-of-bounds memory access in the neighbor filter's deflate16 function. Fix: Add 'if (width > 1)' guard around the middle and right border filter calls to prevent processing when width is insufficient. - Type: CVE - ID: CVE-2020-22027 - SUG: NA - DESC: fix CVE-2020-22027
3 个月前
backport-CVE-2020-22029.patch
fix(cve): CVE-2020-22029 fix overreads in gauss array in libavfilter/vf_colorconstancy.c Upstream commit: a7fd1279703683ebb548ef7baa2f1519994496ae Fixes: trac.ffmpeg.org/ticket/8250 Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-22029 Closes #121
3 个月前
backport-CVE-2020-22030.patch
fix(cve): CVE-2020-22030 Fix heap-buffer overflow in libavfilter/af_afade.c crossfade_samples_fltp. Upstream commit: e1b89c76f66343d1b495165664647317c66764bb Closes #125 (cherry picked from commit 43c308b09a7480cc96e2474e63f7b499ee9e83a1)
3 个月前
backport-CVE-2020-22034.patch
fix CVE-2020-22034 Type: CVE ID: CVE-2020-22034 SUG: NA DESC: fix CVE-2020-22034 A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory corruption. Upstream commit: 1331e001796c656a4a3c770a16121c15ec1db2ac Fixes: https://trac.ffmpeg.org/ticket/8236 Closes #134
3 个月前
backport-CVE-2024-35366.patch
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
backport-CVE-2024-35367.patch
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
backport-CVE-2024-35368.patch
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
backport-CVE-2024-36613.patch
fix CVE-2024-36613 (cherry picked from commit 8ce5f487bb5cbddd1da9c8d4e307247d5997f4ab)
1 年前
backport-CVE-2024-36616.patch
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
backport-CVE-2024-36617.patch
fix CVE-2024-36617 CVE-2024-36618 (cherry picked from commit 49d0c89410e4ef74d4c93608d137eea7f9ec9ae3)
1 年前
backport-CVE-2024-36618.patch
fix CVE-2024-36617 CVE-2024-36618 (cherry picked from commit 49d0c89410e4ef74d4c93608d137eea7f9ec9ae3)
1 年前
backport-CVE-2025-59728.patch
fix CVE-2025-59728 Type: CVE ID: CVE-2025-59728 SUG: NA DESC: fix CVE-2025-59728 An out-of-bounds NUL-byte write vulnerability exists in FFmpeg in libavformat/dashdec.c when handling MPEG-DASH manifests. When calculating the content path, xmlNodeGetContent returns a buffer precisely allocated to match the string length. If the last non-NUL byte is not '/', the code appends '/' in-place, writing the NUL byte beyond the allocated buffer. Upstream commit: ce0a655f85c1144d19a4acad59afbb92e4997e30 Fixes: BIGSLEEP-433502298 Closes #137
3 个月前
backport-CVE-2026-70629.patch
fix(cve): CVE-2026-70629 Co-Authored-By: qwen
26 天前
ffmpeg-4.2.4.tar.xz LFS
fix CVE-2020-22031, CVE-2020-22032, CVE-2020-22023, CVE-2020-21041, CVE-2020-22040, CVE-2020-22036 (cherry picked from commit 3298a5c7be8855ee9059caf54b30af3fe1c57ddd)
1 个月前
ffmpeg.spec
fix CVE-2026-18393, CVE-2026-38343, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348 and CVE-2026-38349 Backport 7 upstream fixes from release/4.4 (n4.4) to fix DoS vulnerabilities in ffmpeg 4.2.4: - CVE-2026-18393: avcodec/tdsc remove double stride adjustment (8027aa35a8) - CVE-2026-38343: avfilter/vf_scale integer overflow in config_props (007877d3d0, adapted for 4.2.4 local w/h vars) - CVE-2026-38344: swscale/utils initialize chroma when luma switched to cascade (d0d34fca71) - CVE-2026-38346: swscale/output integer overflow in yuv2planeX_8_c (72b2d5791b) - CVE-2026-38347: swscale/alphablend overread alpha plane on subsampled odd size (48603149f1, adapted for 4.2.4 y loop) - CVE-2026-38348: swscale/utils signed integer overflow in *Inc (9dd5bd8fde) - CVE-2026-38349: swscale/output integer overflow in yuv2rgba64_1_c_template (241530f9be, adapted for 4.2.4 "<< 11" form) Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit 2a4baf0ed01971702772f324a127bb451d9d3d2e)
5 天前
fix-CVE-2020-2.patch
Fix CVE-2021-38090/CVE-2020-21697/CVE-2020-22042/CVE-2020-21688/CVE-2020-22037/CVE-2020-22051/CVE-2020-22020/CVE-2025-22921/CVE-2025-22919 s (cherry picked from commit f9f3df71cfee4529f3f2b5f7123ce9e69a369e29)
1 年前
fix-CVE-2020.patch
Fix CVE-2020-22026/CVE-2020-22019/CVE-2020-22021/CVE-2020-22038/CVE-2020-22039/CVE-2020-22044/CVE-2020-22043 (cherry picked from commit a576f9b6fa365679b34eda5368a851dbbae22fdb)
1 年前
fix-CVE-2023-50010.patch
fix CVE-2023-50010
2 年前
fix-CVE-2023-51793.patch
fix CVE-2023-51793
2 年前
fix-CVE-2023-51798.patch
Fix CVE-2023-51798 and CVE-2022-3109
2 年前
fix-CVE-2024-32230.patch
fix CVE-2024-32230
2 年前
fix-CVE-2026-64833.patch
fix CVE-2026-30998, CVE-2026-64833, CVE-2026-64834, CVE-2026-66036 and CVE-2026-66039 Apply upstream fixes for the following vulnerabilities: - CVE-2026-30998: tools/zmqsend: close the input FILE - CVE-2026-64833: avformat/spdifenc: bound DTS core_size against the packet size in the HD path - CVE-2026-64834: avformat/rtpdec_asf: reject ASF objects smaller than their header - CVE-2026-66036: avfilter/vf_hqdn3d: support dynamic frame sizes - CVE-2026-66039: avcodec/mace: reject sample counts that overflow int Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit a8ed3484618e22b49574e92b489d3856284b4794)
16 天前
fix-CVE-2026-64834.patch
fix CVE-2026-30998, CVE-2026-64833, CVE-2026-64834, CVE-2026-66036 and CVE-2026-66039 Apply upstream fixes for the following vulnerabilities: - CVE-2026-30998: tools/zmqsend: close the input FILE - CVE-2026-64833: avformat/spdifenc: bound DTS core_size against the packet size in the HD path - CVE-2026-64834: avformat/rtpdec_asf: reject ASF objects smaller than their header - CVE-2026-66036: avfilter/vf_hqdn3d: support dynamic frame sizes - CVE-2026-66039: avcodec/mace: reject sample counts that overflow int Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit a8ed3484618e22b49574e92b489d3856284b4794)
16 天前
fix-CVE-2026-65703.patch
fix CVE-2026-70628, CVE-2026-70631, CVE-2026-65703 and CVE-2026-65705 Apply upstream fixes for the following vulnerabilities: - CVE-2026-70628: avcodec/dvbsub_parser: avoid signed overflow in the capacity check - CVE-2026-70631: avcodec/tiff: reject inflate output shorter than the strip - CVE-2026-65703: avcodec/tdsc: unref the reference frame on size change - CVE-2026-65705: avfilter/vf_floodfill: use a local front index Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit eedc1da7009a35eb0926d0ceb6f027b078173c1c)
11 天前
fix-CVE-2026-65704.patch
fix CVE-2026-65704 and CVE-2026-65706 Apply upstream fixes for the following vulnerabilities: - CVE-2026-65704: avformat/ty: don't let the Series2 AC3 trim underflow the packet size - CVE-2026-65706: avfilter/vf_swaprect: size the temp row buffer for the widest plane Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit 6072108b76c9a04a19483c1087be6b86215c169d)
14 天前
fix-CVE-2026-65705.patch
fix CVE-2026-70628, CVE-2026-70631, CVE-2026-65703 and CVE-2026-65705 Apply upstream fixes for the following vulnerabilities: - CVE-2026-70628: avcodec/dvbsub_parser: avoid signed overflow in the capacity check - CVE-2026-70631: avcodec/tiff: reject inflate output shorter than the strip - CVE-2026-65703: avcodec/tdsc: unref the reference frame on size change - CVE-2026-65705: avfilter/vf_floodfill: use a local front index Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit eedc1da7009a35eb0926d0ceb6f027b078173c1c)
11 天前
fix-CVE-2026-65706.patch
fix CVE-2026-65704 and CVE-2026-65706 Apply upstream fixes for the following vulnerabilities: - CVE-2026-65704: avformat/ty: don't let the Series2 AC3 trim underflow the packet size - CVE-2026-65706: avfilter/vf_swaprect: size the temp row buffer for the widest plane Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit 6072108b76c9a04a19483c1087be6b86215c169d)
14 天前
fix-CVE-2026-66036.patch
fix CVE-2026-30998, CVE-2026-64833, CVE-2026-64834, CVE-2026-66036 and CVE-2026-66039 Apply upstream fixes for the following vulnerabilities: - CVE-2026-30998: tools/zmqsend: close the input FILE - CVE-2026-64833: avformat/spdifenc: bound DTS core_size against the packet size in the HD path - CVE-2026-64834: avformat/rtpdec_asf: reject ASF objects smaller than their header - CVE-2026-66036: avfilter/vf_hqdn3d: support dynamic frame sizes - CVE-2026-66039: avcodec/mace: reject sample counts that overflow int Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit a8ed3484618e22b49574e92b489d3856284b4794)
16 天前
fix-CVE-2026-66039.patch
fix CVE-2026-30998, CVE-2026-64833, CVE-2026-64834, CVE-2026-66036 and CVE-2026-66039 Apply upstream fixes for the following vulnerabilities: - CVE-2026-30998: tools/zmqsend: close the input FILE - CVE-2026-64833: avformat/spdifenc: bound DTS core_size against the packet size in the HD path - CVE-2026-64834: avformat/rtpdec_asf: reject ASF objects smaller than their header - CVE-2026-66036: avfilter/vf_hqdn3d: support dynamic frame sizes - CVE-2026-66039: avcodec/mace: reject sample counts that overflow int Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit a8ed3484618e22b49574e92b489d3856284b4794)
16 天前
fix-CVE-2026-70628.patch
fix CVE-2026-70628, CVE-2026-70631, CVE-2026-65703 and CVE-2026-65705 Apply upstream fixes for the following vulnerabilities: - CVE-2026-70628: avcodec/dvbsub_parser: avoid signed overflow in the capacity check - CVE-2026-70631: avcodec/tiff: reject inflate output shorter than the strip - CVE-2026-65703: avcodec/tdsc: unref the reference frame on size change - CVE-2026-65705: avfilter/vf_floodfill: use a local front index Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit eedc1da7009a35eb0926d0ceb6f027b078173c1c)
11 天前
fix-CVE-2026-70631.patch
fix CVE-2026-70628, CVE-2026-70631, CVE-2026-65703 and CVE-2026-65705 Apply upstream fixes for the following vulnerabilities: - CVE-2026-70628: avcodec/dvbsub_parser: avoid signed overflow in the capacity check - CVE-2026-70631: avcodec/tiff: reject inflate output shorter than the strip - CVE-2026-65703: avcodec/tdsc: unref the reference frame on size change - CVE-2026-65705: avfilter/vf_floodfill: use a local front index Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit eedc1da7009a35eb0926d0ceb6f027b078173c1c)
11 天前
fix-CVE-2026-75141.patch
fix CVE-2026-75141, CVE-2026-75142, CVE-2026-75144 and CVE-2026-75146 Apply upstream fixes for the following vulnerabilities: - CVE-2026-75141: avformat/hevc: reject hvcC NAL arrays that overflow the 16-bit count - CVE-2026-75142: avformat/mpegenc: reject stream counts that overflow the system header - CVE-2026-75144: avformat/rtpenc_vc2hq: reject data units larger than the RTP payload buffer - CVE-2026-75146: avformat/dashdec: reject a negative fragment index Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit d6ba88ef2499a98dfc25d8ea287ea5634dbb6eec)
16 天前
fix-CVE-2026-75142.patch
fix CVE-2026-75141, CVE-2026-75142, CVE-2026-75144 and CVE-2026-75146 Apply upstream fixes for the following vulnerabilities: - CVE-2026-75141: avformat/hevc: reject hvcC NAL arrays that overflow the 16-bit count - CVE-2026-75142: avformat/mpegenc: reject stream counts that overflow the system header - CVE-2026-75144: avformat/rtpenc_vc2hq: reject data units larger than the RTP payload buffer - CVE-2026-75146: avformat/dashdec: reject a negative fragment index Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit d6ba88ef2499a98dfc25d8ea287ea5634dbb6eec)
16 天前
fix-CVE-2026-75144.patch
fix CVE-2026-75141, CVE-2026-75142, CVE-2026-75144 and CVE-2026-75146 Apply upstream fixes for the following vulnerabilities: - CVE-2026-75141: avformat/hevc: reject hvcC NAL arrays that overflow the 16-bit count - CVE-2026-75142: avformat/mpegenc: reject stream counts that overflow the system header - CVE-2026-75144: avformat/rtpenc_vc2hq: reject data units larger than the RTP payload buffer - CVE-2026-75146: avformat/dashdec: reject a negative fragment index Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit d6ba88ef2499a98dfc25d8ea287ea5634dbb6eec)
16 天前
fix-CVE-2026-75146.patch
fix CVE-2026-75141, CVE-2026-75142, CVE-2026-75144 and CVE-2026-75146 Apply upstream fixes for the following vulnerabilities: - CVE-2026-75141: avformat/hevc: reject hvcC NAL arrays that overflow the 16-bit count - CVE-2026-75142: avformat/mpegenc: reject stream counts that overflow the system header - CVE-2026-75144: avformat/rtpenc_vc2hq: reject data units larger than the RTP payload buffer - CVE-2026-75146: avformat/dashdec: reject a negative fragment index Co-Authored-By: AtomCode (deepseek-v4-flash) <noreply@atomgit.com> (cherry picked from commit d6ba88ef2499a98dfc25d8ea287ea5634dbb6eec)
16 天前
fix-vmaf-model-path.patch
Initial package.
5 年前
fix_ppc_build.patch
Initial package.
5 年前

ffmpeg

介绍

Digital VCR and streaming server

软件架构

软件架构说明

安装教程

  1. xxxx
  2. xxxx
  3. xxxx

使用说明

  1. xxxx
  2. xxxx
  3. xxxx

参与贡献

  1. Fork 本仓库
  2. 新建 Feat_xxx 分支
  3. 提交代码
  4. 新建 Pull Request

特技

  1. 使用 Readme_XXX.md 来支持不同的语言，例如 Readme_en.md, Readme_zh.md
  2. Gitee 官方博客 blog.gitee.com
  3. 你可以 https://gitee.com/explore 这个地址来了解 Gitee 上的优秀开源项目
  4. GVP 全称是 Gitee 最有价值开源项目，是综合评定出的优秀开源项目
  5. Gitee 官方提供的使用手册 https://gitee.com/help
  6. Gitee 封面人物是一档用来展示 Gitee 会员风采的栏目 https://gitee.com/gitee-stars/

项目介绍

Digital VCR and streaming server

94提交数desktop非代码音视频
定制我的领域
README
规则集