The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service (integer signedness error and out-of-array read) via a crafted MPEG file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jan 30, 2018 | Nov 30, 2017 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.2.10Upgrade to FFmpeg version 2.4.14Upgrade to FFmpeg version 3.4.1Upgrade to FFmpeg version 3.3.6Upgrade to FFmpeg version 3.0.10Upgrade to FFmpeg version 3.2.9Upgrade to FFmpeg version 3.3.5Upgrade to FFmpeg version 2.8.14Upgrade to FFmpeg version 3.4 | Dec 11, 2017 | Nov 30, 2017 |
| Freebsd | — | Upgrade ffmpeg | Jul 28, 2018 | Jul 27, 2018 |
| Suse | — | Upgrade libavresample3Upgrade libavformat57Upgrade libavformat-develUpgrade libswresample2Upgrade ffmpegUpgrade libavfilter-develUpgrade libavdevice-develUpgrade libavcodec57Upgrade libswscale-develUpgrade libavutil55Upgrade libavresample-develUpgrade libavdevice57Upgrade libswresample-develUpgrade libpostproc-develUpgrade libavutil-develUpgrade libavcodec-develUpgrade libavfilter6Upgrade libswscale4Upgrade libpostproc54 | Feb 20, 2018 | Nov 30, 2017 |
| Ubuntu | — | Upgrade ffmpeg | Nov 19, 2024 | Nov 30, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub