block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Oct 1, 2024 | Jul 5, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.2.2 | Jul 10, 2019 | Jul 5, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libavcodec58Upgrade libavresample4Upgrade libavutil55Upgrade libpostproc-ffmpeg53Upgrade libpostproc54Upgrade libavcodec-extra57Upgrade libavfilter7Upgrade libswscale-ffmpeg3Upgrade libavfilter6Upgrade libswscale4Upgrade libavformat-ffmpeg56Upgrade libavcodec-ffmpeg56Upgrade libpostproc55Upgrade libavutil-ffmpeg54Upgrade libavcodec-extra58Upgrade libavdevice58Upgrade libavcodec-ffmpeg-extra56Upgrade libswresample2Upgrade libswscale5Upgrade libavformat58Upgrade libavdevice-ffmpeg56Upgrade libavutil56Upgrade libavfilter-extra6Upgrade libavformat57Upgrade ffmpegUpgrade libavresample-ffmpeg2Upgrade libavdevice57Upgrade libavcodec57Upgrade libswresample3Upgrade libavfilter-extra7Upgrade libswresample-ffmpeg1Upgrade libavfilter-ffmpeg5Upgrade libavresample3 | Aug 5, 2020 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub