The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via crafted MPEG-4 video data.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Apr 18, 2019 |
| Debian | — | Upgrade ffmpeg | Jul 30, 2024 | Apr 19, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.2Upgrade to FFmpeg version 4.0.4Upgrade to FFmpeg version 4.2 | Apr 22, 2019 | Apr 19, 2019 |
| Suse | — | Upgrade libavutil56-64bitUpgrade libavdevice58-32bitUpgrade ffmpeg-4-private-develUpgrade libswresample3Upgrade libavcodec58-64bitUpgrade libavutil56-32bitUpgrade libavformat58-64bitUpgrade libavresample4-32bitUpgrade libavcodec58-32bitUpgrade libavformat58Upgrade libswscale5Upgrade libpostproc55-64bitUpgrade ffmpeg-4-libavresample-develUpgrade ffmpeg-4-libavformat-develUpgrade libavfilter7-64bitUpgrade ffmpeg-4-libpostproc-develUpgrade libpostproc55Upgrade ffmpeg-4-libavdevice-develUpgrade libswscale5-32bitUpgrade libpostproc55-32bitUpgrade libswresample3-32bitUpgrade ffmpeg-4-libswscale-develUpgrade libavutil56Upgrade libavresample4-64bitUpgrade libavdevice58Upgrade ffmpeg-4-libavcodec-develUpgrade libavresample4Upgrade libavdevice58-64bitUpgrade libavformat58-32bitUpgrade libavcodec58Upgrade libswresample3-64bitUpgrade ffmpeg-4-libswresample-develUpgrade ffmpeg-4-libavfilter-develUpgrade libswscale5-64bitUpgrade ffmpeg-4-libavutil-develUpgrade libavfilter7Upgrade libavfilter7-32bit | Jan 15, 2020 | Apr 18, 2019 |
| Ubuntu | — | Upgrade libavcodec58Upgrade libpostproc55Upgrade ffmpegUpgrade libswscale4Upgrade libavfilter6Upgrade libswresample3Upgrade libavdevice57Upgrade libavdevice58Upgrade libavformat57Upgrade libavresample3Upgrade libavcodec-extra57Upgrade libavfilter-extra7Upgrade libswresample2Upgrade libpostproc54Upgrade libavutil56Upgrade libavformat58Upgrade libswscale5Upgrade libavcodec57Upgrade libavutil55Upgrade libavfilter7Upgrade libavfilter-extra6Upgrade libavcodec-extra58Upgrade libavresample4 | May 7, 2019 | Apr 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub