The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted H.264 data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 20, 2019 | Dec 23, 2015 |
| Ffmpeg | — | Upgrade to FFmpeg version 2.8.3Upgrade to FFmpeg version 2.5.9Upgrade to FFmpeg version 2.6.6Upgrade to FFmpeg version 2.7.4Upgrade to FFmpeg version 2.4.12 | Sep 29, 2017 | Dec 24, 2015 |
| Suse | — | Upgrade libavcodec57Upgrade libavresample-develUpgrade libavresample3Upgrade libswresample2Upgrade libavcodec-develUpgrade libswscale-develUpgrade libavutil-develUpgrade libavfilter6Upgrade libpostproc-develUpgrade libavformat57Upgrade libavutil55Upgrade libswresample-develUpgrade ffmpegUpgrade libswscale4Upgrade libavdevice57Upgrade libavformat-develUpgrade libpostproc54 | Feb 2, 2016 | Dec 23, 2015 |
| Ubuntu | — | Upgrade ffmpeg | Nov 19, 2024 | Dec 24, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub