FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jul 30, 2024 | Apr 14, 2017 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.3 | Sep 29, 2017 | Apr 14, 2017 |
| Suse | — | Upgrade libswresample-develUpgrade libswscale3Upgrade libavformat56Upgrade libavcodec57Upgrade libavutil54Upgrade libavresample2Upgrade libswresample2Upgrade libpostproc-develUpgrade ffmpegUpgrade libavfilter6Upgrade libpostproc53Upgrade libavresample-develUpgrade libavdevice56Upgrade libavformat-develUpgrade libpostproc54Upgrade libswscale-develUpgrade libavfilter5Upgrade libavcodec56Upgrade libavutil-develUpgrade libavresample3Upgrade libavdevice57Upgrade libswresample1Upgrade libswscale4Upgrade libavutil55Upgrade libavcodec-develUpgrade ffmpeg2-develUpgrade libavformat57 | May 2, 2017 | Apr 14, 2017 |
| Ubuntu | — | Upgrade ffmpeg | Nov 19, 2024 | Apr 14, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub