In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Oct 14, 2019 |
| Debian | — | Upgrade ffmpeg | Jul 10, 2020 | Oct 14, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.4.7Upgrade to FFmpeg version 4.2Upgrade to FFmpeg version 4.1.5Upgrade to FFmpeg version 3.2.16Upgrade to FFmpeg version 4.0.5 | Oct 21, 2019 | Oct 14, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Oct 14, 2019 |
| Suse | — | Upgrade libavutil55-32bitUpgrade libswscale4Upgrade libpostproc54-32bitUpgrade libavdevice57Upgrade libavfilter-develUpgrade libswscale-develUpgrade libavformat-develUpgrade ffmpegUpgrade libavresample-develUpgrade libswresample2Upgrade libavresample3-32bitUpgrade libavdevice57-32bitUpgrade ffmpeg-private-develUpgrade libswscale4-32bitUpgrade libavcodec57-32bitUpgrade libavfilter6Upgrade libavcodec57Upgrade libavformat57-32bitUpgrade libpostproc-develUpgrade libavresample3Upgrade libavformat57Upgrade libavcodec-develUpgrade libavutil55Upgrade libavdevice-develUpgrade libswresample-develUpgrade libavfilter6-32bitUpgrade libswresample2-32bitUpgrade libpostproc54Upgrade libavutil-devel | Jul 16, 2021 | Oct 14, 2019 |
| Ubuntu | — | Upgrade libswscale4Upgrade ffmpegUpgrade libavresample3Upgrade libavcodec-extra58Upgrade libavdevice-ffmpeg56Upgrade libavfilter7Upgrade libavcodec58Upgrade libavfilter-extra6Upgrade libpostproc54Upgrade libavutil55Upgrade libswscale-ffmpeg3Upgrade libavfilter-extra7Upgrade libpostproc-ffmpeg53Upgrade libswresample2Upgrade libavresample4Upgrade libswresample-ffmpeg1Upgrade libavdevice57Upgrade libavdevice58Upgrade libavcodec57Upgrade libavutil56Upgrade libavcodec-ffmpeg56Upgrade libavutil-ffmpeg54Upgrade libavresample-ffmpeg2Upgrade libavformat-ffmpeg56Upgrade libavfilter-ffmpeg5Upgrade libavfilter6Upgrade libswscale5Upgrade libswresample3Upgrade libpostproc55Upgrade libavcodec-extra57Upgrade libavformat57Upgrade libavcodec-ffmpeg-extra56Upgrade libavformat58 | Aug 5, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub