The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. It is possible to initiate the attack remotely. The name of the patch is 92f9b28ed84a77138105475beba16c146bdaf984. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213543.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Aug 22, 2024 | Nov 13, 2022 |
| Debian | — | Upgrade ffmpeg | Jul 30, 2024 | Nov 13, 2022 |
| Ffmpeg | — | Upgrade to FFmpeg version 5.0.3Upgrade to FFmpeg version 6.0Upgrade to FFmpeg version 4.4.4Upgrade to FFmpeg version 5.1.3 | Nov 21, 2022 | Nov 13, 2022 |
| Freebsd | — | Upgrade ffmpegUpgrade mythtvUpgrade mythtv-frontendUpgrade ffmpeg4Upgrade handbrakeUpgrade emby-serverUpgrade emby-server-develUpgrade avidemux | Apr 14, 2023 | Apr 7, 2023 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Dec 27, 2023 | Nov 13, 2022 |
| Suse | — | Upgrade ffmpeg-4-libswresample-develUpgrade libpostproc55_9Upgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-4-libavfilter-develUpgrade libavdevice58_13Upgrade libswscale5_9Upgrade libavcodec58_134-32bitUpgrade libswscale5_9-32bitUpgrade libavformat58_76Upgrade libavfilter7_110Upgrade libswresample3_9-32bitUpgrade libpostproc55_9-32bitUpgrade libavformat58_76-32bitUpgrade ffmpeg-4-libavcodec-develUpgrade ffmpeg-4-libpostproc-develUpgrade libswresample3_9Upgrade ffmpeg-4-private-develUpgrade ffmpeg-4Upgrade libavresample4_0Upgrade libavcodec58_134Upgrade libavresample4_0-32bitUpgrade ffmpeg-4-libavresample-develUpgrade ffmpeg-4-libswscale-develUpgrade libavutil56_70-32bitUpgrade libavfilter7_110-32bitUpgrade libavdevice58_13-32bitUpgrade ffmpeg-4-libavformat-develUpgrade libavutil56_70Upgrade ffmpeg-4-libavdevice-devel | Nov 24, 2022 | Nov 13, 2022 |
| Ubuntu | — | Upgrade libavresample3 (Ubuntu Pro)Upgrade libavcodec59Upgrade libavfilter-extra8Upgrade libavutil56 (Ubuntu Pro)Upgrade libavcodec-extraUpgrade libavcodec58 (Ubuntu Pro)Upgrade libavfilter-extra6 (Ubuntu Pro)Upgrade libavformat-extra (Ubuntu Pro)Upgrade libavfilter-extra (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter8Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavcodec-extra58 (Ubuntu Pro)Upgrade libavdevice57 (Ubuntu Pro)Upgrade libavformat57 (Ubuntu Pro)Upgrade libswresample2 (Ubuntu Pro)Upgrade libavresample4 (Ubuntu Pro)Upgrade libavdevice58 (Ubuntu Pro)Upgrade libavdevice59Upgrade libavcodec-extra59Upgrade libavformat59Upgrade libavcodec-extra57 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec57 (Ubuntu Pro)Upgrade libavfilter-extra7 (Ubuntu Pro)Upgrade libavformat-extra58 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavutil57Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libswscale4 (Ubuntu Pro)Upgrade libavfilter6 (Ubuntu Pro)Upgrade libavformat-extraUpgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libpostproc54 (Ubuntu Pro)Upgrade libavutil55 (Ubuntu Pro)Upgrade libavformat58 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libswresample4Upgrade libswresample3 (Ubuntu Pro)Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libpostproc56Upgrade libavfilter7 (Ubuntu Pro)Upgrade libswscale6Upgrade ffmpegUpgrade libav-tools (Ubuntu Pro)Upgrade libswscale5 (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavformat-extra59Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libpostproc55 (Ubuntu Pro)Upgrade libavfilter-extra | Mar 22, 2023 | Nov 13, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub