The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff_htmlmarkup_to_ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Mar 12, 2019 |
| Debian | — | Upgrade ffmpeg | May 23, 2019 | Mar 12, 2019 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.2 | Mar 14, 2019 | Mar 12, 2019 |
| Suse | — | Upgrade ffmpegUpgrade libswscale-develUpgrade libavcodec57Upgrade libavresample3Upgrade libavutil55Upgrade libavformat-develUpgrade libavresample-develUpgrade libavdevice57Upgrade libswresample2Upgrade libavformat57Upgrade libswscale4Upgrade libpostproc54Upgrade libavcodec-develUpgrade libswresample-develUpgrade libavfilter6Upgrade libpostproc-develUpgrade libavutil-devel | Feb 4, 2022 | Mar 12, 2019 |
| Ubuntu | — | Upgrade libavfilter-extra6Upgrade libavcodec57Upgrade libavdevice57Upgrade libavutil55Upgrade libavcodec-extra58Upgrade libavresample4Upgrade libavfilter7Upgrade libpostproc54Upgrade libswresample3Upgrade libavformat58Upgrade libavcodec-extra57Upgrade libpostproc55Upgrade libavresample3Upgrade ffmpegUpgrade libavdevice58Upgrade libswscale5Upgrade libavformat57Upgrade libavfilter-extra7Upgrade libavutil56Upgrade libswscale4Upgrade libavfilter6Upgrade libswresample2Upgrade libavcodec58 | May 7, 2019 | Mar 12, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub