The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Jun 4, 2019 |
| Debian | — | Upgrade ffmpeg | Jun 6, 2019 | Jun 4, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.2.14 | Jun 6, 2019 | Jun 4, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Jun 4, 2019 |
| Suse | — | Upgrade libavformat57Upgrade libavfilter6Upgrade libavutil-develUpgrade libavresample3Upgrade libpostproc-develUpgrade libswscale4Upgrade libswresample2Upgrade libavformat-develUpgrade libavdevice57Upgrade libavresample-develUpgrade libavcodec-develUpgrade libavutil55Upgrade libpostproc54Upgrade ffmpegUpgrade libavcodec57Upgrade libswscale-develUpgrade libswresample-devel | Feb 4, 2022 | Jun 4, 2019 |
| Ubuntu | — | Upgrade libavformat57Upgrade libavformat-ffmpeg56Upgrade libavdevice57Upgrade libavresample3Upgrade libswresample3Upgrade libavcodec-ffmpeg56Upgrade libavformat58Upgrade libavcodec-ffmpeg-extra56Upgrade libavfilter-extra6Upgrade libavresample-ffmpeg2Upgrade libavfilter-ffmpeg5Upgrade libswscale5Upgrade libavutil55Upgrade libavresample4Upgrade libavfilter7Upgrade libavcodec57Upgrade libavcodec58Upgrade libavcodec-extra58Upgrade libavutil56Upgrade libswscale-ffmpeg3Upgrade libswresample2Upgrade libavcodec-extra57Upgrade libswscale4Upgrade libpostproc55Upgrade libpostproc-ffmpeg53Upgrade libavfilter-extra7Upgrade libavdevice58Upgrade libswresample-ffmpeg1Upgrade libpostproc54Upgrade libavutil-ffmpeg54Upgrade libavfilter6Upgrade ffmpegUpgrade libavdevice-ffmpeg56 | Aug 5, 2020 | Jun 4, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub