FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function in libavcodec/utils.c.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 20, 2019 | Apr 14, 2017 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.3 | Sep 29, 2017 | Apr 14, 2017 |
| Suse | — | Upgrade libavutil55Upgrade libavcodec56Upgrade libpostproc53Upgrade libavcodec57Upgrade libavdevice57Upgrade libpostproc54Upgrade libavfilter5Upgrade libswresample1Upgrade libavutil-develUpgrade libswresample-develUpgrade libswresample2Upgrade libavutil54Upgrade libavresample3Upgrade libavformat57Upgrade libswscale3Upgrade libavresample-develUpgrade libavdevice56Upgrade libavcodec-develUpgrade libavformat56Upgrade ffmpeg2-develUpgrade libavresample2Upgrade libavformat-develUpgrade libswscale4Upgrade libswscale-develUpgrade libavfilter6Upgrade ffmpegUpgrade libpostproc-devel | May 2, 2017 | Apr 14, 2017 |
| Ubuntu | — | Upgrade ffmpeg | Nov 19, 2024 | Apr 14, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub