The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via crafted MPEG-4 video data.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Apr 18, 2019 |
| Debian | — | Upgrade ffmpeg | Jul 30, 2024 | Apr 19, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.2Upgrade to FFmpeg version 4.2Upgrade to FFmpeg version 4.0.4 | Apr 22, 2019 | Apr 19, 2019 |
| Suse | — | Upgrade ffmpeg-4-libavdevice-develUpgrade libavresample4-32bitUpgrade ffmpeg-4-libavformat-develUpgrade ffmpeg-4-libswscale-develUpgrade libavcodec58-64bitUpgrade libpostproc55-64bitUpgrade libpostproc55-32bitUpgrade libswscale5Upgrade libswresample3-32bitUpgrade ffmpeg-4-private-develUpgrade ffmpeg-4-libavresample-develUpgrade libpostproc55Upgrade libavcodec58-32bitUpgrade libswresample3Upgrade libavutil56-64bitUpgrade libavdevice58-32bitUpgrade libswscale5-32bitUpgrade libavutil56-32bitUpgrade ffmpeg-4-libpostproc-develUpgrade libavformat58-64bitUpgrade libavformat58Upgrade libavfilter7-64bitUpgrade libavfilter7Upgrade ffmpeg-4-libswresample-develUpgrade libavformat58-32bitUpgrade libavresample4Upgrade libavfilter7-32bitUpgrade libavdevice58Upgrade ffmpeg-4-libavcodec-develUpgrade libswresample3-64bitUpgrade libavdevice58-64bitUpgrade libavresample4-64bitUpgrade libswscale5-64bitUpgrade libavutil56Upgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-4-libavfilter-develUpgrade libavcodec58 | Jan 15, 2020 | Apr 18, 2019 |
| Ubuntu | — | Upgrade libavresample4Upgrade libavutil56Upgrade libpostproc54Upgrade libswscale5Upgrade libavcodec-extra58Upgrade libavfilter7Upgrade libavformat58Upgrade libavcodec57Upgrade libavutil55Upgrade libavfilter-extra6Upgrade libswresample2Upgrade libavformat57Upgrade libswresample3Upgrade libswscale4Upgrade libavdevice57Upgrade libavresample3Upgrade libavfilter6Upgrade ffmpegUpgrade libavdevice58Upgrade libavcodec-extra57Upgrade libavfilter-extra7Upgrade libpostproc55Upgrade libavcodec58 | May 7, 2019 | Apr 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub