block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Oct 1, 2024 | Jul 5, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.2.2 | Jul 10, 2019 | Jul 5, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libpostproc54Upgrade libavcodec58Upgrade libpostproc55Upgrade libavfilter7Upgrade libavresample4Upgrade libavutil55Upgrade libswscale4Upgrade libavfilter6Upgrade libavcodec-extra57Upgrade libavcodec-ffmpeg56Upgrade libavutil-ffmpeg54Upgrade libpostproc-ffmpeg53Upgrade libavcodec-extra58Upgrade libswscale-ffmpeg3Upgrade libswresample2Upgrade libswscale5Upgrade libavformat-ffmpeg56Upgrade libavcodec-ffmpeg-extra56Upgrade libavdevice58Upgrade libavresample3Upgrade ffmpegUpgrade libavfilter-extra7Upgrade libswresample3Upgrade libavformat58Upgrade libavdevice57Upgrade libswresample-ffmpeg1Upgrade libavutil56Upgrade libavfilter-ffmpeg5Upgrade libavcodec57Upgrade libavfilter-extra6Upgrade libavresample-ffmpeg2Upgrade libavformat57Upgrade libavdevice-ffmpeg56 | Aug 5, 2020 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub