The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
libavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Ut Video data, related to the (1) restore_median and (2) restore_median_il functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libavUpgrade ffmpeg | Jul 30, 2024 | Jan 16, 2015 |
| Ffmpeg | — | Upgrade to FFmpeg version 1.2.11Upgrade to FFmpeg version 2.0.7Upgrade to FFmpeg version 2.1.7Upgrade to FFmpeg version 2.5.2Upgrade to FFmpeg version 2.2.12Upgrade to FFmpeg version 2.3.6Upgrade to FFmpeg version 2.4.5 | Sep 29, 2017 | Jan 16, 2015 |
| Freebsd | — | Upgrade avidemux26Upgrade libavUpgrade avidemux2 | Dec 10, 2025 | Jun 1, 2015 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Oct 30, 2017 | Jan 16, 2015 |
| Ubuntu | — | Upgrade libavformat53Upgrade libavcodec53 | Nov 8, 2024 | Jan 16, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub