FFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free vulnerability in the realmedia demuxer that can result in vulnerability allows attacker to read heap memory. This attack appear to be exploitable via specially crafted RM file has to be provided as input. This vulnerability appears to have been fixed in a7e032a277452366771951e29fd0bf2bd5c029f0 and later.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Jul 23, 2018 |
| Debian | — | Upgrade ffmpeg | Feb 25, 2019 | Jul 23, 2018 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.0.2 | Sep 24, 2018 | Jul 23, 2018 |
| Suse | — | Upgrade libavresample3Upgrade libswscale4Upgrade libavcodec57Upgrade libavutil55Upgrade ffmpegUpgrade libswscale-develUpgrade libavresample-develUpgrade libswresample2Upgrade libavdevice57Upgrade libavformat57Upgrade libavformat-develUpgrade libavfilter6Upgrade libpostproc-develUpgrade libavcodec-develUpgrade libswresample-develUpgrade libpostproc54Upgrade libavutil-devel | Feb 4, 2022 | Jul 23, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub