block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Oct 1, 2024 | Jul 5, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.2.2 | Jul 10, 2019 | Jul 5, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libavformat57Upgrade ffmpegUpgrade libavresample3Upgrade libavresample-ffmpeg2Upgrade libavfilter-ffmpeg5Upgrade libswresample-ffmpeg1Upgrade libavformat58Upgrade libavdevice57Upgrade libavdevice-ffmpeg56Upgrade libavcodec57Upgrade libavutil56Upgrade libavfilter-extra7Upgrade libswresample3Upgrade libavfilter-extra6Upgrade libavcodec58Upgrade libavdevice58Upgrade libavfilter7Upgrade libavfilter6Upgrade libavresample4Upgrade libavformat-ffmpeg56Upgrade libswresample2Upgrade libswscale5Upgrade libpostproc-ffmpeg53Upgrade libpostproc55Upgrade libpostproc54Upgrade libavcodec-extra57Upgrade libavcodec-ffmpeg56Upgrade libavcodec-ffmpeg-extra56Upgrade libavutil-ffmpeg54Upgrade libavutil55Upgrade libswscale4Upgrade libavcodec-extra58Upgrade libswscale-ffmpeg3 | Aug 5, 2020 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub