FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Oct 14, 2019 |
| Debian | — | Upgrade ffmpeg | Dec 9, 2019 | Oct 14, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 2.8.16Upgrade to FFmpeg version 4.0.5Upgrade to FFmpeg version 3.2.15Upgrade to FFmpeg version 3.4.7Upgrade to FFmpeg version 4.2Upgrade to FFmpeg version 4.1.5Upgrade to FFmpeg version 4.3 | Oct 21, 2019 | Oct 14, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Oct 14, 2019 |
| Suse | — | Upgrade libswscale-develUpgrade libavcodec57Upgrade libavresample3Upgrade libswresample2Upgrade ffmpegUpgrade libavresample-develUpgrade libpostproc54Upgrade libavdevice57Upgrade libavformat-develUpgrade libswscale4Upgrade libavutil55Upgrade libavfilter6Upgrade libavcodec-develUpgrade libavformat57Upgrade libavutil-develUpgrade libpostproc-develUpgrade libswresample-devel | Feb 4, 2022 | Oct 14, 2019 |
| Ubuntu | — | Upgrade libavformat-ffmpeg56Upgrade libavcodec57Upgrade libavfilter-ffmpeg5Upgrade libavcodec-ffmpeg-extra56Upgrade libavfilter7Upgrade libavformat58Upgrade libavutil55Upgrade libavcodec-extra57Upgrade libswresample3Upgrade libpostproc55Upgrade libswscale5Upgrade libavcodec-ffmpeg56Upgrade libavformat57Upgrade libavresample-ffmpeg2Upgrade libavfilter6Upgrade libavresample3Upgrade libavfilter-extra7Upgrade libavfilter-extra6Upgrade libavdevice57Upgrade libavutil-ffmpeg54Upgrade libavresample4Upgrade libswresample-ffmpeg1Upgrade libpostproc54Upgrade libavdevice-ffmpeg56Upgrade libavdevice58Upgrade libswscale4Upgrade libswresample2Upgrade libavcodec58Upgrade libpostproc-ffmpeg53Upgrade libavcodec-extra58Upgrade ffmpegUpgrade libswscale-ffmpeg3Upgrade libavutil56 | Aug 5, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub