The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via crafted MPEG-4 video data.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Apr 18, 2019 |
| Debian | — | Upgrade ffmpeg | Jul 30, 2024 | Apr 19, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.0.4Upgrade to FFmpeg version 4.1.2Upgrade to FFmpeg version 4.2 | Apr 22, 2019 | Apr 19, 2019 |
| Suse | — | Upgrade libavfilter7Upgrade libavcodec58Upgrade ffmpeg-4-libswresample-develUpgrade libavfilter7-32bitUpgrade libswresample3-64bitUpgrade libavresample4Upgrade libavresample4-64bitUpgrade libavformat58-32bitUpgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-4-libavcodec-develUpgrade libavdevice58-64bitUpgrade ffmpeg-4-libavfilter-develUpgrade libswscale5-64bitUpgrade libavutil56Upgrade libavdevice58Upgrade ffmpeg-4-libavresample-develUpgrade ffmpeg-4-libavformat-develUpgrade libavformat58Upgrade libpostproc55-32bitUpgrade libswscale5-32bitUpgrade ffmpeg-4-libavdevice-develUpgrade ffmpeg-4-private-develUpgrade libpostproc55Upgrade ffmpeg-4-libswscale-develUpgrade libavutil56-32bitUpgrade libswresample3-32bitUpgrade ffmpeg-4-libpostproc-develUpgrade libavcodec58-64bitUpgrade libavdevice58-32bitUpgrade libavutil56-64bitUpgrade libavcodec58-32bitUpgrade libswresample3Upgrade libavresample4-32bitUpgrade libavfilter7-64bitUpgrade libswscale5Upgrade libpostproc55-64bitUpgrade libavformat58-64bit | Jan 15, 2020 | Apr 18, 2019 |
| Ubuntu | — | Upgrade libavfilter6Upgrade libswresample3Upgrade libavdevice57Upgrade libswscale4Upgrade libavcodec58Upgrade libavcodec-extra57Upgrade ffmpegUpgrade libswresample2Upgrade libavdevice58Upgrade libavfilter-extra7Upgrade libavresample3Upgrade libavformat57Upgrade libpostproc55Upgrade libpostproc54Upgrade libavutil56Upgrade libavutil55Upgrade libavfilter-extra6Upgrade libavcodec57Upgrade libavfilter7Upgrade libavresample4Upgrade libavformat58Upgrade libavcodec-extra58Upgrade libswscale5 | May 7, 2019 | Apr 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub