FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Oct 14, 2019 |
| Debian | — | Upgrade ffmpeg | Dec 9, 2019 | Oct 14, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 2.8.16Upgrade to FFmpeg version 4.0.5Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 4.1.5Upgrade to FFmpeg version 4.2Upgrade to FFmpeg version 3.4.7Upgrade to FFmpeg version 3.2.15 | Oct 21, 2019 | Oct 14, 2019 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Mar 31, 2020 | Oct 14, 2019 |
| Suse | — | Upgrade libavcodec-develUpgrade libswresample-develUpgrade libavformat57Upgrade libavfilter6Upgrade libavutil-develUpgrade libpostproc-develUpgrade libavresample3Upgrade libavresample-develUpgrade libavformat-develUpgrade libswresample2Upgrade libavutil55Upgrade libpostproc54Upgrade libavcodec57Upgrade libswscale-develUpgrade libavdevice57Upgrade libswscale4Upgrade ffmpeg | Feb 4, 2022 | Oct 14, 2019 |
| Ubuntu | — | Upgrade libswresample2Upgrade libavdevice58Upgrade libavcodec-extra58Upgrade libswresample-ffmpeg1Upgrade libavfilter-extra6Upgrade libswscale-ffmpeg3Upgrade libavfilter-extra7Upgrade libpostproc54Upgrade libavdevice-ffmpeg56Upgrade ffmpegUpgrade libavresample4Upgrade libavcodec58Upgrade libavdevice57Upgrade libpostproc-ffmpeg53Upgrade libavutil-ffmpeg54Upgrade libavutil56Upgrade libswscale4Upgrade libavcodec57Upgrade libswscale5Upgrade libavfilter-ffmpeg5Upgrade libavfilter6Upgrade libavcodec-extra57Upgrade libavresample-ffmpeg2Upgrade libavresample3Upgrade libavutil55Upgrade libswresample3Upgrade libavformat58Upgrade libavcodec-ffmpeg56Upgrade libavformat57Upgrade libpostproc55Upgrade libavformat-ffmpeg56Upgrade libavcodec-ffmpeg-extra56Upgrade libavfilter7 | Aug 5, 2020 | Oct 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub