block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Oct 1, 2024 | Jul 5, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.2.2 | Jul 10, 2019 | Jul 5, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libavcodec-ffmpeg-extra56Upgrade libavcodec58Upgrade libavresample4Upgrade libpostproc-ffmpeg53Upgrade libavfilter7Upgrade libavdevice58Upgrade libpostproc55Upgrade libswresample2Upgrade libpostproc54Upgrade libavformat-ffmpeg56Upgrade libavfilter6Upgrade libswscale5Upgrade libswscale-ffmpeg3Upgrade libavcodec-ffmpeg56Upgrade libavcodec-extra57Upgrade libavutil55Upgrade libswscale4Upgrade libavutil-ffmpeg54Upgrade libavcodec-extra58Upgrade ffmpegUpgrade libavdevice-ffmpeg56Upgrade libswresample3Upgrade libavformat57Upgrade libavutil56Upgrade libavdevice57Upgrade libswresample-ffmpeg1Upgrade libavfilter-extra7Upgrade libavformat58Upgrade libavfilter-extra6Upgrade libavcodec57Upgrade libavresample-ffmpeg2Upgrade libavfilter-ffmpeg5Upgrade libavresample3 | Aug 5, 2020 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub