In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Oct 14, 2019 |
| Debian | — | Upgrade ffmpeg | Jul 10, 2020 | Oct 14, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.5Upgrade to FFmpeg version 3.4.7Upgrade to FFmpeg version 3.2.16Upgrade to FFmpeg version 4.0.5Upgrade to FFmpeg version 4.2 | Oct 21, 2019 | Oct 14, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Oct 14, 2019 |
| Suse | — | Upgrade libswscale4-32bitUpgrade libswscale-develUpgrade libpostproc54-32bitUpgrade libavformat-develUpgrade libavresample3-32bitUpgrade libavdevice57-32bitUpgrade ffmpegUpgrade libavutil55-32bitUpgrade libavresample-develUpgrade libavfilter-develUpgrade ffmpeg-private-develUpgrade libswresample2Upgrade libavdevice57Upgrade libswscale4Upgrade libpostproc-develUpgrade libavcodec57-32bitUpgrade libavcodec-develUpgrade libavformat57-32bitUpgrade libavdevice-develUpgrade libavutil-develUpgrade libavcodec57Upgrade libswresample-develUpgrade libavutil55Upgrade libavfilter6-32bitUpgrade libpostproc54Upgrade libavfilter6Upgrade libswresample2-32bitUpgrade libavresample3Upgrade libavformat57 | Jul 16, 2021 | Oct 14, 2019 |
| Ubuntu | — | Upgrade libavfilter6Upgrade libavfilter-ffmpeg5Upgrade libavcodec-ffmpeg56Upgrade libswscale5Upgrade libavformat58Upgrade libswresample3Upgrade libavcodec-ffmpeg-extra56Upgrade libavutil-ffmpeg54Upgrade libavresample-ffmpeg2Upgrade libpostproc55Upgrade libavformat-ffmpeg56Upgrade libavformat57Upgrade libavcodec-extra57Upgrade libavdevice57Upgrade libavutil55Upgrade libavfilter7Upgrade ffmpegUpgrade libavresample3Upgrade libavdevice58Upgrade libavfilter-extra6Upgrade libavcodec58Upgrade libswresample2Upgrade libavcodec57Upgrade libavdevice-ffmpeg56Upgrade libswscale-ffmpeg3Upgrade libavfilter-extra7Upgrade libswscale4Upgrade libswresample-ffmpeg1Upgrade libavcodec-extra58Upgrade libpostproc54Upgrade libpostproc-ffmpeg53Upgrade libavutil56Upgrade libavresample4 | Aug 5, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub