The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade aubio | Jul 30, 2024 | Dec 12, 2017 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.4.2 | Jan 2, 2018 | Dec 12, 2017 |
| Suse | — | Upgrade libavresample4Upgrade libswresample3Upgrade libavutil55Upgrade ffmpeg-4-libavcodec-develUpgrade libswresample3-64bitUpgrade libavcodec-develUpgrade libswscale4Upgrade ffmpeg-4-libavdevice-develUpgrade libavformat57Upgrade libpostproc55-64bitUpgrade libavdevice-develUpgrade ffmpeg-4-libavresample-develUpgrade ffmpeg-4-libswscale-develUpgrade libavformat58Upgrade libavfilter7-64bitUpgrade libavdevice57Upgrade libavfilter7-32bitUpgrade libavcodec58-32bitUpgrade ffmpeg-4-libavfilter-develUpgrade libavresample3Upgrade libswscale5-64bitUpgrade libpostproc55-32bitUpgrade libavdevice58Upgrade libavresample4-32bitUpgrade libavdevice58-64bitUpgrade libpostproc55Upgrade libavresample-develUpgrade libavfilter-develUpgrade libavutil56Upgrade libavcodec58Upgrade libavresample4-64bitUpgrade libavcodec58-64bitUpgrade ffmpegUpgrade libavutil56-32bitUpgrade ffmpeg-4-libavformat-develUpgrade ffmpeg-4-libswresample-develUpgrade ffmpeg-4-libpostproc-develUpgrade libpostproc-develUpgrade libavdevice58-32bitUpgrade libavfilter7Upgrade ffmpeg-4-libavutil-develUpgrade libswresample2Upgrade libswscale5-32bitUpgrade libswscale5Upgrade libavcodec57Upgrade libswresample3-32bitUpgrade libavutil56-64bitUpgrade libswscale-develUpgrade libavformat58-64bitUpgrade libswresample-develUpgrade ffmpeg-4-private-develUpgrade libavformat-develUpgrade libavformat58-32bitUpgrade libavutil-develUpgrade libpostproc54Upgrade libavfilter6 | Feb 20, 2018 | Dec 11, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Dec 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub