In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Oct 14, 2019 |
| Debian | — | Upgrade ffmpeg | Jul 10, 2020 | Oct 14, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.4.7Upgrade to FFmpeg version 4.1.5Upgrade to FFmpeg version 3.2.16Upgrade to FFmpeg version 4.2Upgrade to FFmpeg version 4.0.5 | Oct 21, 2019 | Oct 14, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Oct 14, 2019 |
| Suse | — | Upgrade libavdevice-develUpgrade libavcodec57-32bitUpgrade libavresample3Upgrade libswresample2-32bitUpgrade libavformat57Upgrade libavformat57-32bitUpgrade libavcodec57Upgrade libavutil-develUpgrade libpostproc-develUpgrade libavfilter6Upgrade libavfilter6-32bitUpgrade libavcodec-develUpgrade libavutil55Upgrade libpostproc54Upgrade libswresample-develUpgrade libswscale4Upgrade libavfilter-develUpgrade libavutil55-32bitUpgrade libavresample3-32bitUpgrade libpostproc54-32bitUpgrade ffmpegUpgrade libswresample2Upgrade libswscale4-32bitUpgrade ffmpeg-private-develUpgrade libavdevice57Upgrade libswscale-develUpgrade libavformat-develUpgrade libavdevice57-32bitUpgrade libavresample-devel | Jul 16, 2021 | Oct 14, 2019 |
| Ubuntu | — | Upgrade libavutil55Upgrade libavresample4Upgrade libavcodec-extra58Upgrade libavcodec58Upgrade libpostproc54Upgrade libavcodec57Upgrade libswscale4Upgrade libswresample-ffmpeg1Upgrade libavfilter7Upgrade libavfilter-extra6Upgrade libavfilter-extra7Upgrade libpostproc-ffmpeg53Upgrade libavdevice-ffmpeg56Upgrade libswscale-ffmpeg3Upgrade libswresample2Upgrade libavresample3Upgrade ffmpegUpgrade libavdevice57Upgrade libavutil56Upgrade libavdevice58Upgrade libavfilter-ffmpeg5Upgrade libavformat57Upgrade libavformat-ffmpeg56Upgrade libavutil-ffmpeg54Upgrade libavresample-ffmpeg2Upgrade libavfilter6Upgrade libpostproc55Upgrade libswresample3Upgrade libavcodec-ffmpeg56Upgrade libavformat58Upgrade libavcodec-ffmpeg-extra56Upgrade libswscale5Upgrade libavcodec-extra57 | Aug 5, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub