FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function in libavcodec/utils.c.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 20, 2019 | Apr 14, 2017 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.3 | Sep 29, 2017 | Apr 14, 2017 |
| Suse | — | Upgrade libavutil54Upgrade libavformat56Upgrade libavresample3Upgrade libswscale-develUpgrade libavresample2Upgrade libswresample2Upgrade libavformat57Upgrade ffmpeg2-develUpgrade libavresample-develUpgrade libavdevice56Upgrade ffmpegUpgrade libavcodec-develUpgrade libpostproc-develUpgrade libswscale3Upgrade libswresample-develUpgrade libavformat-develUpgrade libswscale4Upgrade libavfilter6Upgrade libswresample1Upgrade libavfilter5Upgrade libpostproc53Upgrade libavcodec56Upgrade libavutil-develUpgrade libavutil55Upgrade libavcodec57Upgrade libpostproc54Upgrade libavdevice57 | May 2, 2017 | Apr 14, 2017 |
| Ubuntu | — | Upgrade ffmpeg | Nov 19, 2024 | Apr 14, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub