The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted TIFF file, related to the tiff_decode_tag and decode_frame functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Oct 1, 2024 | Feb 12, 2016 |
| Debian | — | Upgrade ffmpeg | Jul 30, 2024 | Feb 12, 2016 |
| Ffmpeg | — | Upgrade to FFmpeg version 2.7.6Upgrade to FFmpeg version 2.8.6Upgrade to FFmpeg version 2.5.11Upgrade to FFmpeg version 2.4.13Upgrade to FFmpeg version 2.6.8 | Sep 29, 2017 | Feb 12, 2016 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Oct 30, 2017 | Feb 12, 2016 |
| Suse | — | Upgrade libavfilter5Upgrade libavcodec-develUpgrade libavresample2Upgrade libavutil54-debuginfo-32bitUpgrade libpostproc53-debuginfoUpgrade ffmpeg-develUpgrade libswresample1-debuginfo-32bitUpgrade libswscale3-debuginfo-32bitUpgrade libswresample1Upgrade libavresample2-32bitUpgrade libavformat56-32bitUpgrade ffmpeg-debuginfoUpgrade libavdevice-develUpgrade libavfilter-develUpgrade libavformat56-debuginfoUpgrade libavcodec56Upgrade libswscale3-32bitUpgrade libpostproc53-debuginfo-32bitUpgrade libavcodec56-32bitUpgrade libavdevice56-debuginfo-32bitUpgrade libavformat56Upgrade libpostproc-develUpgrade libswresample-develUpgrade libavutil-develUpgrade libavutil54-32bitUpgrade libavformat56-debuginfo-32bitUpgrade libswresample1-32bitUpgrade libavfilter5-debuginfoUpgrade libswscale3-debuginfoUpgrade libavfilter5-32bitUpgrade libpostproc53Upgrade libavfilter5-debuginfo-32bitUpgrade libavdevice56Upgrade libavresample-develUpgrade libswresample1-debuginfoUpgrade libavdevice56-debuginfoUpgrade libavformat-develUpgrade libavutil54Upgrade libswscale-develUpgrade libavcodec56-debuginfo-32bitUpgrade libswscale3Upgrade libavutil54-debuginfoUpgrade libavresample2-debuginfo-32bitUpgrade libpostproc53-32bitUpgrade ffmpeg-debugsourceUpgrade libavcodec56-debuginfoUpgrade libavresample2-debuginfoUpgrade libavdevice56-32bitUpgrade ffmpeg | Feb 21, 2016 | Feb 12, 2016 |
| Ubuntu | — | Upgrade ffmpeg | Nov 19, 2024 | Feb 12, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub