Name: CVE-2019-17542: Out-of-bounds Write
Creator: Rapid7
Published: 2019-10-14T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-17542, CWE-787, CVSS 9.8, EPSS 0.02305

FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c.

CVSS Details

CVSS 3.1 Base Score: 9.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade ffmpegUpgrade ffmpeg4	Aug 22, 2024	Oct 14, 2019
Debian	—	Upgrade ffmpeg	Dec 9, 2019	Oct 14, 2019
Ffmpeg	—	Upgrade to FFmpeg version 2.8.16Upgrade to FFmpeg version 4.0.5Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 4.1.5Upgrade to FFmpeg version 4.2Upgrade to FFmpeg version 3.4.7Upgrade to FFmpeg version 3.2.15	Oct 21, 2019	Oct 14, 2019
Gentoo Linux	—	Upgrade media-video/ffmpeg.	Mar 31, 2020	Oct 14, 2019
Suse	—	Upgrade libavcodec-develUpgrade libswresample-develUpgrade libavformat57Upgrade libavfilter6Upgrade libavutil-develUpgrade libpostproc-develUpgrade libavresample3Upgrade libavresample-develUpgrade libavformat-develUpgrade libswresample2Upgrade libavutil55Upgrade libpostproc54Upgrade libavcodec57Upgrade libswscale-develUpgrade libavdevice57Upgrade libswscale4Upgrade ffmpeg	Feb 4, 2022	Oct 14, 2019
Ubuntu	—	Upgrade libswresample2Upgrade libavdevice58Upgrade libavcodec-extra58Upgrade libswresample-ffmpeg1Upgrade libavfilter-extra6Upgrade libswscale-ffmpeg3Upgrade libavfilter-extra7Upgrade libpostproc54Upgrade libavdevice-ffmpeg56Upgrade ffmpegUpgrade libavresample4Upgrade libavcodec58Upgrade libavdevice57Upgrade libpostproc-ffmpeg53Upgrade libavutil-ffmpeg54Upgrade libavutil56Upgrade libswscale4Upgrade libavcodec57Upgrade libswscale5Upgrade libavfilter-ffmpeg5Upgrade libavfilter6Upgrade libavcodec-extra57Upgrade libavresample-ffmpeg2Upgrade libavresample3Upgrade libavutil55Upgrade libswresample3Upgrade libavformat58Upgrade libavcodec-ffmpeg56Upgrade libavformat57Upgrade libpostproc55Upgrade libavformat-ffmpeg56Upgrade libavcodec-ffmpeg-extra56Upgrade libavfilter7	Aug 5, 2020	Oct 14, 2019

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence