FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | May 25, 2021 |
| Debian | — | Upgrade ffmpeg | Nov 4, 2022 | May 25, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3.3Upgrade to FFmpeg version 4.4 | May 28, 2021 | May 25, 2021 |
| Ubuntu | — | Upgrade ffmpegUpgrade libavfilter-extra6Upgrade libavcodec-extra57Upgrade libavcodec57Upgrade libswresample3Upgrade libavdevice57Upgrade libavresample3Upgrade libavformat57Upgrade libavformat-extra58Upgrade libswscale5Upgrade libavutil56Upgrade libpostproc55Upgrade libavfilter6Upgrade libavformat58Upgrade libavcodec-extra58Upgrade libavdevice58Upgrade libpostproc54Upgrade libswresample2Upgrade libavfilter-extra7Upgrade libavfilter7Upgrade libavcodec58Upgrade libavutil55Upgrade libavresample4Upgrade libswscale4 | Jun 9, 2022 | May 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub