track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Jan 3, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 3, 2021 |
| Debian | — | Upgrade ffmpeg | Jul 30, 2024 | Jan 3, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3.1 | Jan 7, 2021 | Jan 3, 2021 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | May 28, 2021 | Jan 3, 2021 |
| Suse | — | Upgrade libavcodec58_134Upgrade libswscale5_9Upgrade libavutil56_70Upgrade libavresample4_0Upgrade libavdevice58_13Upgrade libavfilter7_110Upgrade libswresample3_9Upgrade libpostproc55_9Upgrade libavformat58_76 | Aug 9, 2024 | Jan 3, 2021 |
| Ubuntu | — | Upgrade ffmpeg | Nov 19, 2024 | Jan 3, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub