A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. The attack can be initiated remotely. The name of the patch is 13c13109759090b7f7182480d075e13b36ed8edd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213544.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Aug 22, 2024 | Nov 13, 2022 |
| Debian | — | Upgrade ffmpeg | Jul 30, 2024 | Nov 13, 2022 |
| Ffmpeg | — | Upgrade to FFmpeg version 6.0Upgrade to FFmpeg version 5.1.3Upgrade to FFmpeg version 5.0.3 | Nov 21, 2022 | Nov 13, 2022 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Dec 27, 2023 | Nov 13, 2022 |
| Ubuntu | — | Upgrade libswscale5 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libavfilter-extra8Upgrade libswresample3 (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavformat-extra59Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavfilter6 (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavcodec-extra59Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavdevice59Upgrade libavfilter-extra (Ubuntu Pro)Upgrade libavutil55 (Ubuntu Pro)Upgrade libavformat-extra58 (Ubuntu Pro)Upgrade libavformat-extraUpgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libswscale6Upgrade libavformat-extra (Ubuntu Pro)Upgrade libavfilter-extra7 (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec58 (Ubuntu Pro)Upgrade libswresample4Upgrade libavformat58 (Ubuntu Pro)Upgrade libavfilter7 (Ubuntu Pro)Upgrade libavformat59Upgrade libavfilter-extraUpgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libswscale4 (Ubuntu Pro)Upgrade libpostproc54 (Ubuntu Pro)Upgrade libavcodec-extraUpgrade libpostproc55 (Ubuntu Pro)Upgrade libavcodec59Upgrade libpostproc56Upgrade ffmpegUpgrade libav-tools (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavresample4 (Ubuntu Pro)Upgrade libavfilter-extra6 (Ubuntu Pro)Upgrade libavdevice58 (Ubuntu Pro)Upgrade libavutil56 (Ubuntu Pro)Upgrade libswresample2 (Ubuntu Pro)Upgrade libavfilter8Upgrade libavcodec57 (Ubuntu Pro)Upgrade libavdevice57 (Ubuntu Pro)Upgrade libavcodec-extra58 (Ubuntu Pro)Upgrade libavcodec-extra57 (Ubuntu Pro)Upgrade libavformat57 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavutil57Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavresample3 (Ubuntu Pro) | Mar 22, 2023 | Nov 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub