In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Oct 14, 2019 |
| Debian | — | Upgrade ffmpeg | Jul 10, 2020 | Oct 14, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.5Upgrade to FFmpeg version 3.4.7Upgrade to FFmpeg version 3.2.16Upgrade to FFmpeg version 4.0.5Upgrade to FFmpeg version 4.2 | Oct 21, 2019 | Oct 14, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Oct 14, 2019 |
| Suse | — | Upgrade libavresample3Upgrade libavcodec57-32bitUpgrade libavutil55Upgrade libavfilter6Upgrade libavfilter6-32bitUpgrade libpostproc54Upgrade libswresample2-32bitUpgrade libavcodec-develUpgrade libpostproc-develUpgrade libavdevice-develUpgrade libavformat57Upgrade libavformat57-32bitUpgrade libavcodec57Upgrade libswresample-develUpgrade libavutil-develUpgrade libavresample-develUpgrade libswscale4Upgrade libswscale4-32bitUpgrade ffmpegUpgrade libswresample2Upgrade ffmpeg-private-develUpgrade libavdevice57-32bitUpgrade libswscale-develUpgrade libavformat-develUpgrade libavutil55-32bitUpgrade libavresample3-32bitUpgrade libpostproc54-32bitUpgrade libavfilter-develUpgrade libavdevice57 | Jul 16, 2021 | Oct 14, 2019 |
| Ubuntu | — | Upgrade libavresample4Upgrade libavcodec-extra58Upgrade libavdevice57Upgrade libpostproc54Upgrade libavdevice-ffmpeg56Upgrade libavresample3Upgrade libavcodec57Upgrade ffmpegUpgrade libswresample2Upgrade libavcodec58Upgrade libavutil55Upgrade libswresample-ffmpeg1Upgrade libavdevice58Upgrade libswscale4Upgrade libpostproc-ffmpeg53Upgrade libavfilter7Upgrade libavfilter-extra7Upgrade libswscale-ffmpeg3Upgrade libavutil56Upgrade libavfilter-extra6Upgrade libswresample3Upgrade libavfilter-ffmpeg5Upgrade libavutil-ffmpeg54Upgrade libavformat58Upgrade libswscale5Upgrade libavcodec-ffmpeg56Upgrade libavformat-ffmpeg56Upgrade libavformat57Upgrade libavcodec-extra57Upgrade libavcodec-ffmpeg-extra56Upgrade libavresample-ffmpeg2Upgrade libpostproc55Upgrade libavfilter6 | Aug 5, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub