debian/openh264 vulnerabilities

Latest debian/openh264 CVEs

Newest publication first

1. DSA-5870-1 openh264 - security update

   Published 2025-02-26

   Unknown

2. CVE-2025-27091 OpenH264 Decoding Functions Heap Overflow Vulnerability

   Published 2025-02-20

   High·CVSS 8.6 EPSS 0.69%

   OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition betwee...

3. CVE-2014-8002 Use-after-free vulnerability in decode_slice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

   Published 2014-11-25

   High·CVSS 7.5 EPSS 2.2%

   Use-after-free vulnerability in decode_slice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

4. CVE-2014-8001 Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

   Published 2014-11-25

   High·CVSS 7.5 EPSS 2.5%

   Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.