aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Jun 4, 2019 |
| Debian | — | Upgrade ffmpeg | Jun 6, 2019 | Jun 4, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.2.14 | Jun 6, 2019 | Jun 4, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Jun 4, 2019 |
| Suse | — | Upgrade libpostproc54Upgrade ffmpegUpgrade libswresample-develUpgrade libswscale-develUpgrade libavutil55Upgrade libavcodec57Upgrade libavdevice57Upgrade libavresample-develUpgrade libavformat-develUpgrade libavresample3Upgrade libswscale4Upgrade libavformat57Upgrade libavcodec-develUpgrade libavfilter6Upgrade libpostproc-develUpgrade libavutil-develUpgrade libswresample2 | Feb 4, 2022 | Jun 4, 2019 |
| Ubuntu | — | Upgrade libswresample-ffmpeg1Upgrade libpostproc-ffmpeg53Upgrade libavcodec-extra58Upgrade libavdevice58Upgrade libavutil56Upgrade libavfilter-extra7Upgrade libswscale-ffmpeg3Upgrade libavcodec-extra57Upgrade libavutil-ffmpeg54Upgrade libavfilter7Upgrade libswscale4Upgrade libavdevice-ffmpeg56Upgrade ffmpegUpgrade libavcodec58Upgrade libswresample2Upgrade libavcodec57Upgrade libpostproc54Upgrade libpostproc55Upgrade libavfilter6Upgrade libswscale5Upgrade libavformat57Upgrade libavcodec-ffmpeg-extra56Upgrade libavresample-ffmpeg2Upgrade libavresample4Upgrade libswresample3Upgrade libavfilter-extra6Upgrade libavdevice57Upgrade libavformat58Upgrade libavutil55Upgrade libavfilter-ffmpeg5Upgrade libavcodec-ffmpeg56Upgrade libavresample3Upgrade libavformat-ffmpeg56 | Aug 5, 2020 | Jun 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub