block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg | Oct 1, 2024 | Jul 5, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.2.2 | Jul 10, 2019 | Jul 5, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Jul 5, 2019 |
| Ubuntu | — | Upgrade libswscale4Upgrade libavcodec-extra57Upgrade libavutil-ffmpeg54Upgrade libpostproc-ffmpeg53Upgrade libavcodec-extra58Upgrade libavcodec58Upgrade libswscale-ffmpeg3Upgrade libpostproc55Upgrade libavresample4Upgrade libavfilter7Upgrade libavcodec-ffmpeg-extra56Upgrade libswscale5Upgrade libswresample2Upgrade libavfilter6Upgrade libavformat-ffmpeg56Upgrade libavcodec-ffmpeg56Upgrade libavdevice58Upgrade libpostproc54Upgrade libavutil55Upgrade libavresample3Upgrade libavformat57Upgrade libavdevice-ffmpeg56Upgrade libavformat58Upgrade libavutil56Upgrade ffmpegUpgrade libavresample-ffmpeg2Upgrade libavfilter-ffmpeg5Upgrade libavfilter-extra7Upgrade libswresample-ffmpeg1Upgrade libswresample3Upgrade libavcodec57Upgrade libavfilter-extra6Upgrade libavdevice57 | Aug 5, 2020 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub