block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Oct 1, 2024 | Jul 5, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.2.2 | Jul 10, 2019 | Jul 5, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libavresample4Upgrade libpostproc-ffmpeg53Upgrade libpostproc54Upgrade libavcodec-extra58Upgrade libavfilter6Upgrade libavdevice58Upgrade libswscale-ffmpeg3Upgrade libswscale4Upgrade libswresample2Upgrade libavcodec-ffmpeg-extra56Upgrade libavcodec-extra57Upgrade libavfilter7Upgrade libpostproc55Upgrade libswscale5Upgrade libavutil55Upgrade libavformat-ffmpeg56Upgrade libavcodec-ffmpeg56Upgrade libavutil-ffmpeg54Upgrade libavcodec58Upgrade libavdevice57Upgrade libavformat57Upgrade libavfilter-ffmpeg5Upgrade libavformat58Upgrade libavcodec57Upgrade libavfilter-extra6Upgrade libavresample-ffmpeg2Upgrade libavdevice-ffmpeg56Upgrade ffmpegUpgrade libavutil56Upgrade libavfilter-extra7Upgrade libswresample-ffmpeg1Upgrade libswresample3Upgrade libavresample3 | Aug 5, 2020 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub