FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 20, 2019 | Apr 14, 2017 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.3 | Sep 29, 2017 | Apr 14, 2017 |
| Suse | — | Upgrade libavutil-develUpgrade libavfilter6Upgrade libavfilter5Upgrade libavcodec57Upgrade libswresample1Upgrade libavcodec56Upgrade libpostproc53Upgrade libswscale3Upgrade libavformat57Upgrade libavresample3Upgrade libpostproc-develUpgrade libavformat56Upgrade libavcodec-develUpgrade libswscale-develUpgrade libavformat-develUpgrade libswscale4Upgrade libavutil54Upgrade libavdevice57Upgrade ffmpegUpgrade libavdevice56Upgrade libswresample2Upgrade ffmpeg2-develUpgrade libpostproc54Upgrade libavresample-develUpgrade libavutil55Upgrade libswresample-develUpgrade libavresample2 | May 2, 2017 | Apr 14, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub