In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Oct 14, 2019 |
| Debian | — | Upgrade ffmpeg | Jul 10, 2020 | Oct 14, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.2.16Upgrade to FFmpeg version 4.1.5Upgrade to FFmpeg version 3.4.7Upgrade to FFmpeg version 4.2Upgrade to FFmpeg version 4.0.5 | Oct 21, 2019 | Oct 14, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Oct 14, 2019 |
| Suse | — | Upgrade libavdevice-develUpgrade libswresample2-32bitUpgrade libavfilter6Upgrade libavfilter6-32bitUpgrade libavcodec57Upgrade libavcodec57-32bitUpgrade libavformat57-32bitUpgrade libpostproc-develUpgrade libswresample-develUpgrade libavresample3Upgrade libavformat57Upgrade libavutil-develUpgrade libpostproc54Upgrade libavutil55Upgrade libavcodec-develUpgrade libpostproc54-32bitUpgrade libavformat-develUpgrade libavresample3-32bitUpgrade ffmpegUpgrade ffmpeg-private-develUpgrade libswscale4-32bitUpgrade libavdevice57-32bitUpgrade libavresample-develUpgrade libavdevice57Upgrade libswscale4Upgrade libswresample2Upgrade libavutil55-32bitUpgrade libavfilter-develUpgrade libswscale-devel | Jul 16, 2021 | Oct 14, 2019 |
| Ubuntu | — | Upgrade libswresample2Upgrade libavresample4Upgrade libavcodec-extra58Upgrade libavdevice58Upgrade libswscale4Upgrade libavutil56Upgrade libavcodec57Upgrade libavdevice57Upgrade libpostproc-ffmpeg53Upgrade ffmpegUpgrade libpostproc54Upgrade libavdevice-ffmpeg56Upgrade libavcodec58Upgrade libavresample3Upgrade libavfilter-extra7Upgrade libavfilter7Upgrade libavfilter-extra6Upgrade libavutil55Upgrade libswscale-ffmpeg3Upgrade libswresample-ffmpeg1Upgrade libavfilter-ffmpeg5Upgrade libavformat58Upgrade libavcodec-extra57Upgrade libavcodec-ffmpeg56Upgrade libavresample-ffmpeg2Upgrade libavutil-ffmpeg54Upgrade libavformat57Upgrade libswscale5Upgrade libswresample3Upgrade libavformat-ffmpeg56Upgrade libavfilter6Upgrade libavcodec-ffmpeg-extra56Upgrade libpostproc55 | Aug 5, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub