The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asf_o format demuxer that can result in heap-buffer-overflow that may result in remote code execution. This attack appears to be exploitable via specially crafted ASF file that has to be provided as input to FFmpeg. This vulnerability appears to have been fixed in 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 and later.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Jul 23, 2018 |
| Debian | — | Upgrade ffmpeg | May 23, 2019 | Jul 23, 2018 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.0.2 | Sep 21, 2018 | Jul 23, 2018 |
| Suse | — | Upgrade libswresample2Upgrade libavformat-develUpgrade libavutil55Upgrade libavformat57Upgrade libavdevice57Upgrade libavcodec57Upgrade libavresample-develUpgrade ffmpegUpgrade libswscale-develUpgrade libavresample3Upgrade libswscale4Upgrade libswresample-develUpgrade libavcodec-develUpgrade libavfilter6Upgrade libpostproc54Upgrade libpostproc-develUpgrade libavutil-devel | Feb 4, 2022 | Jul 23, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub