In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Oct 14, 2019 |
| Debian | — | Upgrade ffmpeg | Jul 10, 2020 | Oct 14, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.5Upgrade to FFmpeg version 3.4.7Upgrade to FFmpeg version 3.2.16Upgrade to FFmpeg version 4.2Upgrade to FFmpeg version 4.0.5 | Oct 21, 2019 | Oct 14, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Oct 14, 2019 |
| Suse | — | Upgrade libavformat-develUpgrade libavfilter-develUpgrade libswresample2Upgrade libpostproc54-32bitUpgrade libswscale4-32bitUpgrade ffmpegUpgrade ffmpeg-private-develUpgrade libavdevice57-32bitUpgrade libavdevice57Upgrade libavresample-develUpgrade libavutil55-32bitUpgrade libavresample3-32bitUpgrade libswscale-develUpgrade libswscale4Upgrade libswresample-develUpgrade libavresample3Upgrade libavformat57-32bitUpgrade libavcodec57Upgrade libavformat57Upgrade libpostproc-develUpgrade libavdevice-develUpgrade libavcodec-develUpgrade libpostproc54Upgrade libavutil55Upgrade libavfilter6Upgrade libavfilter6-32bitUpgrade libavcodec57-32bitUpgrade libswresample2-32bitUpgrade libavutil-devel | Jul 16, 2021 | Oct 14, 2019 |
| Ubuntu | — | Upgrade libavcodec-ffmpeg-extra56Upgrade libavcodec-ffmpeg56Upgrade libpostproc55Upgrade libavfilter-ffmpeg5Upgrade libswresample3Upgrade libavformat57Upgrade libswscale5Upgrade libavfilter6Upgrade libavcodec-extra57Upgrade libavformat58Upgrade libavformat-ffmpeg56Upgrade libavutil-ffmpeg54Upgrade libavresample-ffmpeg2Upgrade libavdevice-ffmpeg56Upgrade libswresample2Upgrade libavresample4Upgrade libswscale4Upgrade libavcodec-extra58Upgrade libavcodec57Upgrade libavresample3Upgrade libavdevice58Upgrade libavfilter-extra6Upgrade libavfilter7Upgrade libpostproc-ffmpeg53Upgrade libavdevice57Upgrade libswscale-ffmpeg3Upgrade libpostproc54Upgrade libavfilter-extra7Upgrade libavcodec58Upgrade libavutil55Upgrade libswresample-ffmpeg1Upgrade libavutil56Upgrade ffmpeg | Aug 5, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub