decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Jan 4, 2021 |
| Debian | — | Upgrade ffmpeg | Feb 1, 2021 | Jan 4, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.4.9Upgrade to FFmpeg version 4.2.5Upgrade to FFmpeg version 4.3.2Upgrade to FFmpeg version 2.8.18Upgrade to FFmpeg version 4.4Upgrade to FFmpeg version 3.2.16Upgrade to FFmpeg version 4.1.7 | Jan 7, 2021 | Jan 4, 2021 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | May 28, 2021 | Jan 4, 2021 |
| Suse | — | Upgrade libpostproc-develUpgrade libavfilter-develUpgrade libavresample3-64bitUpgrade libavdevice57Upgrade ffmpeg-private-develUpgrade libavresample-develUpgrade libavcodec57Upgrade libswscale-develUpgrade ffmpegUpgrade libswresample-develUpgrade libavfilter6Upgrade libavdevice57-32bitUpgrade libavutil55-32bitUpgrade libavformat-develUpgrade libpostproc54Upgrade libswresample2Upgrade libpostproc54-32bitUpgrade libavfilter6-32bitUpgrade libavcodec57-32bitUpgrade libswresample2-32bitUpgrade libavcodec-develUpgrade libavutil55Upgrade libavresample3-32bitUpgrade libavresample3Upgrade libavformat57-32bitUpgrade libavutil-develUpgrade libavdevice-develUpgrade libswscale4-32bitUpgrade libswscale4Upgrade libavformat57 | Oct 27, 2021 | Jan 4, 2021 |
| Ubuntu | — | Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libswresample2Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libswscale4Upgrade libpostproc54Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libavresample4Upgrade libavfilter-extra6Upgrade libavdevice58Upgrade libavcodec-extra58Upgrade libavfilter-extra7Upgrade libavdevice57Upgrade libavcodec58Upgrade libavutil56Upgrade ffmpegUpgrade libavcodec57Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavformat57Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libswresample3Upgrade libavfilter7Upgrade libswscale5Upgrade libavformat58Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavutil55Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavcodec-extra57Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libpostproc55Upgrade libavresample3Upgrade libavfilter6Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro) | Jun 9, 2022 | Jan 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub