FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-ffmpegalpine-linux-upgrade-ffmpeg4 | Aug 22, 2024 | Oct 14, 2019 | |
| Debian | debian-upgrade-ffmpeg | Dec 9, 2019 | Oct 14, 2019 | |
| Ffmpeg | ffmpeg-upgrade-2_8_16ffmpeg-upgrade-3_2_15ffmpeg-upgrade-3_4_7ffmpeg-upgrade-4_0_5ffmpeg-upgrade-4_1_5ffmpeg-upgrade-4_2ffmpeg-upgrade-4_3 | Oct 21, 2019 | Oct 14, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-media-video-ffmpeg | Mar 31, 2020 | Oct 14, 2019 | |
| Suse | — | suse-upgrade-ffmpegsuse-upgrade-libavcodec-develsuse-upgrade-libavcodec57suse-upgrade-libavdevice57suse-upgrade-libavfilter6suse-upgrade-libavformat-develsuse-upgrade-libavformat57suse-upgrade-libavresample-develsuse-upgrade-libavresample3suse-upgrade-libavutil-develsuse-upgrade-libavutil55suse-upgrade-libpostproc-develsuse-upgrade-libpostproc54suse-upgrade-libswresample-develsuse-upgrade-libswresample2suse-upgrade-libswscale-develsuse-upgrade-libswscale4 | Feb 4, 2022 | Oct 14, 2019 |
| Ubuntu | ubuntu-upgrade-ffmpegubuntu-upgrade-libavcodec-extra57ubuntu-upgrade-libavcodec-extra58ubuntu-upgrade-libavcodec-ffmpeg-extra56ubuntu-upgrade-libavcodec-ffmpeg56ubuntu-upgrade-libavcodec57ubuntu-upgrade-libavcodec58ubuntu-upgrade-libavdevice-ffmpeg56ubuntu-upgrade-libavdevice57ubuntu-upgrade-libavdevice58ubuntu-upgrade-libavfilter-extra6ubuntu-upgrade-libavfilter-extra7ubuntu-upgrade-libavfilter-ffmpeg5ubuntu-upgrade-libavfilter6ubuntu-upgrade-libavfilter7ubuntu-upgrade-libavformat-ffmpeg56ubuntu-upgrade-libavformat57ubuntu-upgrade-libavformat58ubuntu-upgrade-libavresample-ffmpeg2ubuntu-upgrade-libavresample3ubuntu-upgrade-libavresample4ubuntu-upgrade-libavutil-ffmpeg54ubuntu-upgrade-libavutil55ubuntu-upgrade-libavutil56ubuntu-upgrade-libpostproc-ffmpeg53ubuntu-upgrade-libpostproc54ubuntu-upgrade-libpostproc55ubuntu-upgrade-libswresample-ffmpeg1ubuntu-upgrade-libswresample2ubuntu-upgrade-libswresample3ubuntu-upgrade-libswscale-ffmpeg3ubuntu-upgrade-libswscale4ubuntu-upgrade-libswscale5 | Aug 5, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub