SUSE ffmpeg-4 Security Fixes Address Multiple Vulnerabilities

SUSE released an important update for ffmpeg-4 on June 18, 2026, addressing several vulnerabilities. The update includes fixes for CVE-2023-6601, CVE-2024-35366, CVE-2025-1594, CVE-2025-9951, CVE-2025-10256, and CVE-2025-63757. These vulnerabilities include issues such as an HLS Unsafe File Extension Bypass and multiple buffer overflows that could lead to denial of service. The vulnerabilities affect the ffmpeg-4 software, which is widely used for multimedia processing. Security ratings for these vulnerabilities range from 3.3 to 6.9 on the CVSS scale, indicating varying levels of severity. Users are urged to apply the updates promptly to mitigate potential risks. The vulnerabilities were identified in various components of ffmpeg, including libavformat and libavcodec. This update is crucial for maintaining the security of systems utilizing ffmpeg.

Key Points: • SUSE released an important update for ffmpeg-4 on June 18, 2026. • The update addresses multiple vulnerabilities, including buffer overflows and unsafe file extension bypass. • Affected CVEs include CVE-2023-6601, CVE-2024-35366, and CVE-2025-1594.