FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ff_h264_slice_context_init function in libavcodec/h264dec.c.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ffmpeg | — | Upgrade to FFmpeg version 3.3 | Sep 29, 2017 | Apr 14, 2017 |
| Suse | — | Upgrade libavutil55Upgrade libavutil-develUpgrade libswscale-develUpgrade libswscale4Upgrade libswresample-develUpgrade libpostproc54Upgrade libavcodec-develUpgrade libavresample3Upgrade libavdevice57Upgrade libavformat-develUpgrade libavcodec57Upgrade libavfilter6Upgrade libavresample-develUpgrade libpostproc-develUpgrade ffmpegUpgrade libswresample2Upgrade libavformat57 | May 2, 2017 | Apr 14, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub