The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Apr 18, 2019 |
| Debian | — | Upgrade ffmpeg | May 23, 2019 | Apr 19, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.4.6Upgrade to FFmpeg version 4.1.3Upgrade to FFmpeg version 3.2.14Upgrade to FFmpeg version 4.2Upgrade to FFmpeg version 2.8.16 | Apr 22, 2019 | Apr 19, 2019 |
| Suse | — | Upgrade ffmpeg-4-libswresample-develUpgrade ffmpeg-4-libavformat-develUpgrade libswresample3-32bitUpgrade ffmpeg-4-libswscale-develUpgrade libswresample3Upgrade ffmpeg-4-libavresample-develUpgrade libpostproc55-32bitUpgrade libavformat58-32bitUpgrade libavcodec58-32bitUpgrade ffmpeg-4-private-develUpgrade libavdevice58Upgrade libavfilter7-64bitUpgrade libavresample4Upgrade ffmpeg-4-libavfilter-develUpgrade libavcodec58Upgrade libavfilter7Upgrade libavutil56Upgrade ffmpeg-4-libavutil-develUpgrade libavresample4-64bitUpgrade libavdevice58-64bitUpgrade libswscale5Upgrade ffmpeg-4-libpostproc-develUpgrade libavutil56-64bitUpgrade libavformat58-64bitUpgrade libavresample4-32bitUpgrade libpostproc55Upgrade ffmpeg-4-libavcodec-develUpgrade ffmpeg-4-libavdevice-develUpgrade libavformat58Upgrade libavcodec58-64bitUpgrade libavdevice58-32bitUpgrade libswresample3-64bitUpgrade libpostproc55-64bitUpgrade libswscale5-32bitUpgrade libswscale5-64bitUpgrade libavutil56-32bitUpgrade libavfilter7-32bit | Jan 15, 2020 | Apr 18, 2019 |
| Ubuntu | — | Upgrade libavfilter-extra7Upgrade libavfilter-ffmpeg5Upgrade libpostproc-ffmpeg53Upgrade libavformat-ffmpeg56Upgrade libavfilter6Upgrade libswscale5Upgrade libavutil56Upgrade libpostproc55Upgrade libavdevice58Upgrade ffmpegUpgrade libavcodec-extra57Upgrade libavcodec58Upgrade libavcodec-ffmpeg56Upgrade libswscale4Upgrade libavresample3Upgrade libswresample2Upgrade libavutil-ffmpeg54Upgrade libavformat57Upgrade libavfilter7Upgrade libavcodec-ffmpeg-extra56Upgrade libswscale-ffmpeg3Upgrade libavfilter-extra6Upgrade libavutil55Upgrade libavformat58Upgrade libavresample-ffmpeg2Upgrade libavcodec-extra58Upgrade libavdevice-ffmpeg56Upgrade libpostproc54Upgrade libswresample3Upgrade libavresample4Upgrade libswresample-ffmpeg1Upgrade libavdevice57Upgrade libavcodec57 | May 7, 2019 | Apr 18, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub