CVE catalog

CVE-2021-38171

ffmpeg affected and fixed versions

[CVE catalog]

adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a necessary step because the second argument to init_get_bits can be crafted.

Severity
High · CVSS 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.41% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securityffmpeg7:7.1.5-0+deb13u1Fixed[CVE-2021-38171]
Debiantrixieffmpeg7:4.4.1-1FixedDistribution-reported fixed boundary[CVE-2021-38171]
Debiantrixieffmpeg7:7.1.5-0+deb13u1Fixed[CVE-2021-38171]
Debiansidffmpeg7:4.4.1-1FixedDistribution-reported fixed boundary[CVE-2021-38171]
Debiansidffmpeg7:9.0.2-4Fixed[CVE-2021-38171]
Ubuntuproffmpeg7:2.8.17-0ubuntu0.1+esm4Fixed[UBUNTU-CVE-2021-38171]
Suselinux enterprise workstation extension 15 sp3ffmpeg3.4.2-11.11.1Fixed[SUSE-SU-2021:3193-1]
Suselinux enterprise workstation extension 15 sp2ffmpeg3.4.2-11.11.1Fixed[SUSE-SU-2021:3193-1]
Suselinux enterprise server for sap applications 15 sp1ffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise server for sap applications 15ffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise server 15-ltssffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise server 15 sp1-ltssffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]

Showing 12 fix observations. All 70 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debianbookwormffmpeg7:4.4.1-1FixedDistribution-reported fixed boundary[CVE-2021-38171]
Debianbookwormffmpeg7:5.1.9-0+deb12u1Fixed[CVE-2021-38171]
Debianbookworm-securityffmpeg7:5.1.9-0+deb12u1Fixed[CVE-2021-38171]
Debianforkyffmpeg7:4.4.1-1FixedDistribution-reported fixed boundary[CVE-2021-38171]
Debianforkyffmpeg7:9.0.2-4Fixed[CVE-2021-38171]
Debiansidffmpeg7:4.4.1-1FixedDistribution-reported fixed boundary[CVE-2021-38171]
Debiansidffmpeg7:9.0.2-4Fixed[CVE-2021-38171]
Debiantrixieffmpeg7:4.4.1-1FixedDistribution-reported fixed boundary[CVE-2021-38171]
Debiantrixieffmpeg7:7.1.5-0+deb13u1Fixed[CVE-2021-38171]
Debiantrixie-securityffmpeg7:7.1.5-0+deb13u1Fixed[CVE-2021-38171]
Opensuseleap 15.3ffmpeg3.4.2-11.11.1Fixed[OPENSUSE-SU-2021:3193-1]
Suseenterprise storage 6ffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise high performance computing 15 sp1-esposffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise high performance computing 15 sp1-ltssffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise high performance computing 15-esposffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise high performance computing 15-ltssffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise module for desktop applications 15 sp2ffmpeg3.4.2-11.11.1Fixed[SUSE-SU-2021:3193-1]
Suselinux enterprise module for desktop applications 15 sp3ffmpeg3.4.2-11.11.1Fixed[SUSE-SU-2021:3193-1]
Suselinux enterprise module for package hub 15 sp2ffmpeg3.4.2-11.11.1Fixed[SUSE-SU-2021:3193-1]
Suselinux enterprise module for package hub 15 sp3ffmpeg3.4.2-11.11.1Fixed[SUSE-SU-2021:3193-1]
Suselinux enterprise server 15 sp1-bclffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise server 15 sp1-ltssffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise server 15-ltssffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise server for sap applications 15ffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise server for sap applications 15 sp1ffmpeg3.4.2-4.37.1Fixed[SUSE-SU-2021:3212-1]
Suselinux enterprise workstation extension 15 sp2ffmpeg3.4.2-11.11.1Fixed[SUSE-SU-2021:3193-1]
Suselinux enterprise workstation extension 15 sp3ffmpeg3.4.2-11.11.1Fixed[SUSE-SU-2021:3193-1]
Ubuntu18.04ffmpeg7:3.3.4-2Affected[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.3.4-2build3Affected[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.4-2ubuntu2Affected[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.4-4Affected[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.4-4build1Affected[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.4.1-1Affected[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.4.1-1build1Affected[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.4.11-0ubuntu0.1Fixed[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.4.2-1Affected[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.4.2-1build1Affected[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.4.2-2Affected[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.4.4-0ubuntu0.18.04.1Affected[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.4.6-0ubuntu0.18.04.1Affected[UBUNTU-CVE-2021-38171]
Ubuntu18.04ffmpeg7:3.4.8-0ubuntu0.2Affected[UBUNTU-CVE-2021-38171]
Ubuntu20.04ffmpeg7:4.1.4-1build2Affected[UBUNTU-CVE-2021-38171]
Ubuntu20.04ffmpeg7:4.2.1-2Affected[UBUNTU-CVE-2021-38171]
Ubuntu20.04ffmpeg7:4.2.1-2ubuntu1Affected[UBUNTU-CVE-2021-38171]
Ubuntu20.04ffmpeg7:4.2.2-1build1Affected[UBUNTU-CVE-2021-38171]
Ubuntu20.04ffmpeg7:4.2.2-1ubuntu1Affected[UBUNTU-CVE-2021-38171]
Ubuntu20.04ffmpeg7:4.2.4-1ubuntu0.1Affected[UBUNTU-CVE-2021-38171]
Ubuntu20.04ffmpeg7:4.2.7-0ubuntu0.1Fixed[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.7.2-1build1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.1-1ubuntu1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.10-0ubuntu0.16.04.1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.11-0ubuntu0.16.04.1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.14-0ubuntu0.16.04.1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.15-0ubuntu0.16.04.1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.15-0ubuntu0.16.04.1+esm1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.17-0ubuntu0.1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.17-0ubuntu0.1+esm1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.17-0ubuntu0.1+esm2Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.17-0ubuntu0.1+esm3Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.17-0ubuntu0.1+esm4Fixed[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.2-1ubuntu1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.3-1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.4-1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.4-1ubuntu1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.4-1ubuntu2Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.4-1ubuntu3Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.4-1ubuntu4Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.6-1ubuntu1Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.6-1ubuntu2Affected[UBUNTU-CVE-2021-38171]
Ubuntuproffmpeg7:2.8.8-0ubuntu0.16.04.1Affected[UBUNTU-CVE-2021-38171]
Original provider fields
{
  "package_releases": [
    {
      "name": "ffmpeg",
      "status": "fixed",
      "release": "sid",
      "version": "7:9.0.2-4"
    },
    {
      "name": "ffmpeg",
      "status": "fixed",
      "release": "forky",
      "version": "7:9.0.2-4"
    },
    {
      "name": "ffmpeg",
      "status": "fixed",
      "release": "trixie",
      "version": "7:7.1.5-0+deb13u1"
    },
    {
      "name": "ffmpeg",
      "status": "fixed",
      "release": "trixie-security",
      "version": "7:7.1.5-0+deb13u1"
    },
    {
      "name": "ffmpeg",
      "status": "fixed",
      "release": "bookworm",
      "version": "7:5.1.9-0+deb12u1"
    },
    {
      "name": "ffmpeg",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "7:5.1.9-0+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "ffmpeg",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "7:4.4.1-1"
    },
    {
      "bug": null,
      "name": "ffmpeg",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "7:4.4.1-1"
    },
    {
      "bug": null,
      "name": "ffmpeg",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "7:4.4.1-1"
    },
    {
      "bug": null,
      "name": "ffmpeg",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "7:4.4.1-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "ffmpeg",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7:2.8.17-0ubuntu0.1+esm4"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "7:2.7.2-1build1",
        "7:2.8.1-1ubuntu1",
        "7:2.8.2-1ubuntu1",
        "7:2.8.3-1",
        "7:2.8.4-1",
        "7:2.8.4-1ubuntu1",
        "7:2.8.4-1ubuntu2",
        "7:2.8.4-1ubuntu3",
        "7:2.8.4-1ubuntu4",
        "7:2.8.6-1ubuntu1",
        "7:2.8.6-1ubuntu2",
        "7:2.8.8-0ubuntu0.16.04.1",
        "7:2.8.10-0ubuntu0.16.04.1",
        "7:2.8.11-0ubuntu0.16.04.1",
        "7:2.8.14-0ubuntu0.16.04.1",
        "7:2.8.15-0ubuntu0.16.04.1",
        "7:2.8.15-0ubuntu0.16.04.1+esm1",
        "7:2.8.17-0ubuntu0.1",
        "7:2.8.17-0ubuntu0.1+esm1",
        "7:2.8.17-0ubuntu0.1+esm2",
        "7:2.8.17-0ubuntu0.1+esm3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-38171",
      "fixed_version": "7:2.8.17-0ubuntu0.1+esm4",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-38171",
      "provider_updated_at": "2026-04-22T12:58:24.540333Z"
    },
    {
      "name": "ffmpeg",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7:3.4.11-0ubuntu0.1"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "7:3.3.4-2",
        "7:3.3.4-2build3",
        "7:3.4-2ubuntu2",
        "7:3.4-4",
        "7:3.4-4build1",
        "7:3.4.1-1",
        "7:3.4.1-1build1",
        "7:3.4.2-1",
        "7:3.4.2-1build1",
        "7:3.4.2-2",
        "7:3.4.4-0ubuntu0.18.04.1",
        "7:3.4.6-0ubuntu0.18.04.1",
        "7:3.4.8-0ubuntu0.2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-38171",
      "fixed_version": "7:3.4.11-0ubuntu0.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-38171",
      "provider_updated_at": "2026-04-22T12:58:24.540333Z"
    },
    {
      "name": "ffmpeg",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7:4.2.7-0ubuntu0.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "7:4.1.4-1build2",
        "7:4.2.1-2",
        "7:4.2.1-2ubuntu1",
        "7:4.2.2-1build1",
        "7:4.2.2-1ubuntu1",
        "7:4.2.4-1ubuntu0.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-38171",
      "fixed_version": "7:4.2.7-0ubuntu0.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-38171",
      "provider_updated_at": "2026-04-22T12:58:24.540333Z"
    },
    {
      "name": "ffmpeg",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-11.11.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2021:3193-1",
      "fixed_version": "3.4.2-11.11.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2021:3193-1",
      "provider_updated_at": "2026-02-04T04:10:47.774330Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-4.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3212-1",
      "fixed_version": "3.4.2-4.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3212-1",
      "provider_updated_at": "2026-02-04T02:34:32.691213Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-4.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3212-1",
      "fixed_version": "3.4.2-4.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3212-1",
      "provider_updated_at": "2026-02-04T02:34:32.691213Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-4.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3212-1",
      "fixed_version": "3.4.2-4.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3212-1",
      "provider_updated_at": "2026-02-04T02:34:32.691213Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-4.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3212-1",
      "fixed_version": "3.4.2-4.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3212-1",
      "provider_updated_at": "2026-02-04T02:34:32.691213Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-4.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3212-1",
      "fixed_version": "3.4.2-4.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3212-1",
      "provider_updated_at": "2026-02-04T02:34:32.691213Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-4.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3212-1",
      "fixed_version": "3.4.2-4.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3212-1",
      "provider_updated_at": "2026-02-04T02:34:32.691213Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-4.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3212-1",
      "fixed_version": "3.4.2-4.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3212-1",
      "provider_updated_at": "2026-02-04T02:34:32.691213Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-4.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3212-1",
      "fixed_version": "3.4.2-4.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3212-1",
      "provider_updated_at": "2026-02-04T02:34:32.691213Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-4.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3212-1",
      "fixed_version": "3.4.2-4.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3212-1",
      "provider_updated_at": "2026-02-04T02:34:32.691213Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-4.37.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3212-1",
      "fixed_version": "3.4.2-4.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3212-1",
      "provider_updated_at": "2026-02-04T02:34:32.691213Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-11.11.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for desktop applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3193-1",
      "fixed_version": "3.4.2-11.11.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3193-1",
      "provider_updated_at": "2026-02-04T02:32:56.095483Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-11.11.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for desktop applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3193-1",
      "fixed_version": "3.4.2-11.11.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3193-1",
      "provider_updated_at": "2026-02-04T02:32:56.095483Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-11.11.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3193-1",
      "fixed_version": "3.4.2-11.11.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3193-1",
      "provider_updated_at": "2026-02-04T02:32:56.095483Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-11.11.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3193-1",
      "fixed_version": "3.4.2-11.11.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3193-1",
      "provider_updated_at": "2026-02-04T02:32:56.095483Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-11.11.1"
            }
          ]
        }
      ],
      "release": "linux enterprise workstation extension 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3193-1",
      "fixed_version": "3.4.2-11.11.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3193-1",
      "provider_updated_at": "2026-02-04T02:32:56.095483Z"
    },
    {
      "name": "ffmpeg",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4.2-11.11.1"
            }
          ]
        }
      ],
      "release": "linux enterprise workstation extension 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:3193-1",
      "fixed_version": "3.4.2-11.11.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:3193-1",
      "provider_updated_at": "2026-02-04T02:32:56.095483Z"
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [ffmpeg]Unknown
    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [ffmpeg-doc]Unknown

    Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · all · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · all · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · all · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · all · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavcodec59]Unknown

    Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavdevice59]Unknown

    Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavfilter8]Unknown

    Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavformat59]Unknown

    Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavutil57]Unknown

    Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavutil-dev]Unknown

    Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libpostproc56]Unknown

    Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • Source package: [ffmpeg]

    Details (4)
    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:4.4.1-1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

Next results

Observed:

References