The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
libavcodec/huffyuvdec.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted Huffyuv data, related to an out-of-bounds write and (1) unchecked return codes from the init_vlc function and (2) "len==0 cases."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Sep 20, 2017 | Nov 23, 2013 |
| Debian | — | Upgrade ffmpegUpgrade libav | Jul 30, 2024 | Nov 23, 2013 |
| Ffmpeg | — | Upgrade to FFmpeg version 1.1.2Upgrade to FFmpeg version 0.10.7Upgrade to FFmpeg version 0.11.3Upgrade to FFmpeg version 1.0.4Upgrade to FFmpeg version 0.5.11Upgrade to FFmpeg version 0.9.3 | Sep 29, 2017 | Nov 23, 2013 |
| Gentoo Linux | — | Upgrade media-video/libav.Upgrade media-video/ffmpeg. | Oct 30, 2017 | Nov 23, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub