The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Jun 4, 2019 |
| Debian | — | Upgrade ffmpeg | Jun 6, 2019 | Jun 4, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.2.14 | Jun 6, 2019 | Jun 4, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Jun 4, 2019 |
| Suse | — | Upgrade libswscale-develUpgrade libavutil55Upgrade libavcodec57Upgrade libpostproc54Upgrade ffmpegUpgrade libswresample-develUpgrade libavcodec-develUpgrade libavresample3Upgrade libpostproc-develUpgrade libavutil-develUpgrade libswresample2Upgrade libswscale4Upgrade libavresample-develUpgrade libavdevice57Upgrade libavfilter6Upgrade libavformat57Upgrade libavformat-devel | Feb 4, 2022 | Jun 4, 2019 |
| Ubuntu | — | Upgrade libavfilter7Upgrade libswresample-ffmpeg1Upgrade libpostproc-ffmpeg53Upgrade libswresample2Upgrade libswscale-ffmpeg3Upgrade libavcodec-extra57Upgrade libavcodec57Upgrade libpostproc54Upgrade libavfilter-extra7Upgrade libavdevice58Upgrade libswscale4Upgrade libavfilter6Upgrade libpostproc55Upgrade ffmpegUpgrade libavutil-ffmpeg54Upgrade libavdevice-ffmpeg56Upgrade libavcodec58Upgrade libavcodec-extra58Upgrade libavutil56Upgrade libavresample3Upgrade libavcodec-ffmpeg56Upgrade libavdevice57Upgrade libswresample3Upgrade libavutil55Upgrade libswscale5Upgrade libavformat57Upgrade libavfilter-ffmpeg5Upgrade libavformat-ffmpeg56Upgrade libavresample-ffmpeg2Upgrade libavcodec-ffmpeg-extra56Upgrade libavfilter-extra6Upgrade libavformat58Upgrade libavresample4 | Aug 5, 2020 | Jun 4, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub