libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Apr 18, 2019 |
| Debian | — | Upgrade ffmpeg | May 23, 2019 | Apr 19, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.2.14Upgrade to FFmpeg version 4.1.3Upgrade to FFmpeg version 4.2Upgrade to FFmpeg version 3.4.6Upgrade to FFmpeg version 2.8.16 | Apr 22, 2019 | Apr 19, 2019 |
| Suse | — | Upgrade libavcodec58-32bitUpgrade ffmpeg-4-private-develUpgrade libavfilter7-64bitUpgrade ffmpeg-4-libswresample-develUpgrade ffmpeg-4-libavresample-develUpgrade libavcodec58Upgrade libswresample3Upgrade libavdevice58Upgrade libswresample3-32bitUpgrade libavformat58-32bitUpgrade libpostproc55-32bitUpgrade ffmpeg-4-libavformat-develUpgrade ffmpeg-4-libswscale-develUpgrade libavresample4Upgrade ffmpeg-4-libavfilter-develUpgrade libswresample3-64bitUpgrade libavcodec58-64bitUpgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-4-libpostproc-develUpgrade libavresample4-32bitUpgrade libswscale5-64bitUpgrade libavformat58Upgrade ffmpeg-4-libavdevice-develUpgrade libavutil56-32bitUpgrade libavresample4-64bitUpgrade libavformat58-64bitUpgrade libavfilter7Upgrade libswscale5Upgrade libpostproc55Upgrade libavdevice58-64bitUpgrade libavfilter7-32bitUpgrade libavutil56Upgrade libavdevice58-32bitUpgrade libswscale5-32bitUpgrade ffmpeg-4-libavcodec-develUpgrade libpostproc55-64bitUpgrade libavutil56-64bit | Jan 15, 2020 | Apr 18, 2019 |
| Ubuntu | — | Upgrade libavcodec57Upgrade libavresample4Upgrade libavcodec-extra58Upgrade libpostproc54Upgrade libswscale-ffmpeg3Upgrade libavformat58Upgrade libswresample3Upgrade libswresample-ffmpeg1Upgrade libavfilter-extra6Upgrade libavdevice-ffmpeg56Upgrade libavcodec-ffmpeg-extra56Upgrade libavfilter7Upgrade libavutil55Upgrade libavdevice57Upgrade libavresample-ffmpeg2Upgrade libavfilter-extra7Upgrade libpostproc-ffmpeg53Upgrade libavcodec-ffmpeg56Upgrade libswscale5Upgrade ffmpegUpgrade libavformat-ffmpeg56Upgrade libavfilter-ffmpeg5Upgrade libavdevice58Upgrade libavutil-ffmpeg54Upgrade libavformat57Upgrade libpostproc55Upgrade libavresample3Upgrade libavutil56Upgrade libavcodec58Upgrade libavcodec-extra57Upgrade libavfilter6Upgrade libswscale4Upgrade libswresample2 | May 7, 2019 | Apr 18, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub