CVE catalog

CVE-2022-4907

ffmpeg affected and fixed versions

[CVE catalog]

Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.14% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence
Original provider fields
{
  "package_releases": [
    {
      "name": "ffmpeg",
      "status": "fixed",
      "release": "sid",
      "version": "7:9.0.2-4"
    },
    {
      "name": "ffmpeg",
      "status": "fixed",
      "release": "forky",
      "version": "7:9.0.2-4"
    },
    {
      "name": "ffmpeg",
      "status": "fixed",
      "release": "trixie",
      "version": "7:7.1.5-0+deb13u1"
    },
    {
      "name": "ffmpeg",
      "status": "fixed",
      "release": "trixie-security",
      "version": "7:7.1.5-0+deb13u1"
    },
    {
      "name": "ffmpeg",
      "status": "fixed",
      "release": "bookworm",
      "version": "7:5.1.9-0+deb12u1"
    },
    {
      "name": "ffmpeg",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "7:5.1.9-0+deb12u1"
    },
    {
      "name": "chromium",
      "status": "fixed",
      "release": "sid",
      "version": "156.0.8078.73-1"
    },
    {
      "name": "chromium",
      "status": "fixed",
      "release": "forky",
      "version": "156.0.8078.47-1"
    },
    {
      "name": "chromium",
      "status": "fixed",
      "release": "trixie",
      "version": "150.0.7871.181-1~deb13u1"
    },
    {
      "name": "chromium",
      "status": "fixed",
      "release": "trixie-security",
      "version": "156.0.8078.73-1~deb13u1"
    },
    {
      "name": "chromium",
      "status": "fixed",
      "release": "bookworm",
      "version": "150.0.7871.100-1~deb12u1"
    },
    {
      "name": "chromium",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "156.0.8078.47-1~deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "ffmpeg",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "7:6.0-4"
    },
    {
      "bug": null,
      "name": "ffmpeg",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "7:6.0-4"
    },
    {
      "bug": null,
      "name": "ffmpeg",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "7:6.0-4"
    },
    {
      "bug": null,
      "name": "ffmpeg",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "7:5.1.4-0+deb12u1"
    },
    {
      "bug": null,
      "name": "chromium",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "108.0.5359.71-1"
    },
    {
      "bug": null,
      "name": "chromium",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "108.0.5359.71-1"
    },
    {
      "bug": null,
      "name": "chromium",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "108.0.5359.71-1"
    },
    {
      "bug": null,
      "name": "chromium",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "108.0.5359.71-1"
    }
  ],
  "distribution_packages": []
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [chromium]Unknown
    Details (4)

    • 150.0.7871.100-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 150.0.7871.100-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

  • [chromium-common]Unknown

    Source package: [chromium]

    Details (4)

    • 150.0.7871.100-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 150.0.7871.100-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

  • [chromium-driver]Unknown

    Source package: [chromium]

    Details (4)

    • 150.0.7871.100-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 150.0.7871.100-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

  • [chromium-headless-shell]Unknown

    Source package: [chromium]

    Details (4)

    • 150.0.7871.100-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 150.0.7871.100-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

  • [chromium-l10n]Unknown

    Source package: [chromium]

    Details (4)

    • 150.0.7871.100-1~deb12u1 · all · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 150.0.7871.100-1~deb12u1 · all · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

  • [chromium-sandbox]Unknown

    Source package: [chromium]

    Details (4)

    • 150.0.7871.100-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 150.0.7871.100-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

  • [chromium-shell]Unknown

    Source package: [chromium]

    Details (4)

    • 150.0.7871.100-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 150.0.7871.100-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

    • 151.0.7922.173-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 108.0.5359.71-1

      dsa · chromium · debian · bookworm

  • [ffmpeg]Unknown
    Details (4)

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [ffmpeg-doc]Unknown

    Source package: [ffmpeg]

    Details (4)

    • 7:5.1.9-0+deb12u1 · all · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · all · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · all · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · all · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavcodec59]Unknown

    Source package: [ffmpeg]

    Details (4)

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavcodec-dev]Unknown

    Source package: [ffmpeg]

    Details (4)

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavcodec-extra]Unknown

    Source package: [ffmpeg]

    Details (4)

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavcodec-extra59]Unknown

    Source package: [ffmpeg]

    Details (4)

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavdevice59]Unknown

    Source package: [ffmpeg]

    Details (4)

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavdevice-dev]Unknown

    Source package: [ffmpeg]

    Details (4)

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavfilter8]Unknown

    Source package: [ffmpeg]

    Details (4)

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavfilter-dev]Unknown

    Source package: [ffmpeg]

    Details (4)

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavfilter-extra]Unknown

    Source package: [ffmpeg]

    Details (4)

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavfilter-extra8]Unknown

    Source package: [ffmpeg]

    Details (4)

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

  • [libavformat59]Unknown

    Source package: [ffmpeg]

    Details (4)

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

    • 7:5.1.9-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 7:5.1.4-0+deb12u1

      dsa · ffmpeg · debian · bookworm; dsa · ffmpeg · debian · 12

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]