Debian: FFmpeg Critical Denial of Service Threat DLA-4440-1 CVE-2023-6603

CVE-2023-6603

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability
allows a denial of service via a maliciously crafted HLS playlist that
triggers a null pointer dereference during initialization.

CVE-2024-36615

FFmpeg n7.0 has a race condition vulnerability in the VP9 decoder. This
could lead to a data race if video encoding parameters were being exported,
as the side data would be attached in the decoder thread while being read
in the output thread.

CVE-2025-1594

A vulnerability, which was classified as critical, was found in FFmpeg up
to 7.1. This affects the function ff_aac_search_for_tns of the file
libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation
leads to stack-based buffer overflow. It is possible to initiate the attack
remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-7700

A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly