The destroy_buffers function in libavcodec/sanm.c in FFmpeg before 2.7.2 does not properly maintain height and width values in the video context, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via crafted LucasArts Smush video data.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 20, 2019 | Sep 5, 2015 |
| Ffmpeg | — | Upgrade to FFmpeg version 2.6.4Upgrade to FFmpeg version 2.4.11Upgrade to FFmpeg version 2.7.2Upgrade to FFmpeg version 2.5.8Upgrade to FFmpeg version 2.8 | Sep 29, 2017 | Sep 6, 2015 |
| Freebsd | — | Upgrade avidemux2Upgrade ffmpeg2Upgrade mencoderUpgrade ffmpeg1Upgrade avidemuxUpgrade ffmpeg-011Upgrade ffmpeg-develUpgrade kodiUpgrade ffmpeg25Upgrade handbrakeUpgrade ffmpeg0Upgrade ffmpeg24Upgrade mythtv-frontendUpgrade ffmpeg23Upgrade mythtvUpgrade libavUpgrade gstreamer1-libavUpgrade mplayerUpgrade ffmpeg26Upgrade avidemux26Upgrade gstreamer-ffmpegUpgrade plexhometheaterUpgrade ffmpeg | Dec 10, 2025 | Sep 20, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub