FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jul 30, 2024 | Apr 14, 2017 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.3 | Sep 29, 2017 | Apr 14, 2017 |
| Suse | — | Upgrade libavcodec57Upgrade ffmpegUpgrade libavformat56Upgrade libavutil54Upgrade libpostproc53Upgrade libpostproc-develUpgrade libswresample2Upgrade libswscale3Upgrade libswscale-develUpgrade libswresample-develUpgrade libavresample2Upgrade libavfilter6Upgrade libavdevice56Upgrade libpostproc54Upgrade libavresample-develUpgrade libavformat-develUpgrade libavresample3Upgrade libavfilter5Upgrade libavutil-develUpgrade libavdevice57Upgrade libavutil55Upgrade libswresample1Upgrade libswscale4Upgrade libavcodec56Upgrade libavformat57Upgrade libavcodec-develUpgrade ffmpeg2-devel | May 2, 2017 | Apr 14, 2017 |
| Ubuntu | — | Upgrade ffmpeg | Nov 19, 2024 | Apr 14, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub