FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function in libavcodec/utils.c.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 20, 2019 | Apr 14, 2017 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.3 | Sep 29, 2017 | Apr 14, 2017 |
| Suse | — | Upgrade libavutil54Upgrade libavformat56Upgrade libswresample2Upgrade ffmpeg2-develUpgrade libswscale3Upgrade libpostproc-develUpgrade ffmpegUpgrade libavformat-develUpgrade libswresample-develUpgrade libavresample2Upgrade libavformat57Upgrade libavcodec-develUpgrade libswscale-develUpgrade libavfilter6Upgrade libswscale4Upgrade libavdevice56Upgrade libavresample3Upgrade libavresample-develUpgrade libavdevice57Upgrade libpostproc53Upgrade libpostproc54Upgrade libavfilter5Upgrade libswresample1Upgrade libavutil55Upgrade libavutil-develUpgrade libavcodec57Upgrade libavcodec56 | May 2, 2017 | Apr 14, 2017 |
| Ubuntu | — | Upgrade ffmpeg | Nov 19, 2024 | Apr 14, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub