FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Jun 7, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 7, 2020 |
| Debian | — | Upgrade ffmpeg | Jul 10, 2020 | Jun 7, 2020 |
| Ffmpeg | — | Upgrade to FFmpeg version 2.8.17Upgrade to FFmpeg version 4.1.6Upgrade to FFmpeg version 4.0.6Upgrade to FFmpeg version 3.2.15Upgrade to FFmpeg version 4.3.1Upgrade to FFmpeg version 3.4.8Upgrade to FFmpeg version 4.4Upgrade to FFmpeg version 4.2.4 | Jun 15, 2020 | Jun 7, 2020 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Jul 29, 2020 | Jun 7, 2020 |
| Suse | — | Upgrade libpostproc-develUpgrade libswresample2Upgrade libavcodec-develUpgrade libavdevice-develUpgrade libavfilter-develUpgrade libavutil55-32bitUpgrade libavresample-develUpgrade libavresample3Upgrade libavdevice57Upgrade libavformat57Upgrade libavformat-develUpgrade libavresample3-32bitUpgrade libswscale4Upgrade libpostproc54Upgrade libavcodec57Upgrade ffmpeg-private-develUpgrade libswresample2-32bitUpgrade libavformat57-32bitUpgrade libavcodec57-32bitUpgrade libswscale-develUpgrade libavdevice57-32bitUpgrade ffmpegUpgrade libavfilter6-32bitUpgrade libswscale4-32bitUpgrade libavutil55Upgrade libavfilter6Upgrade libswresample-develUpgrade libavutil-develUpgrade libpostproc54-32bit | Jul 15, 2021 | Jun 7, 2020 |
| Ubuntu | — | Upgrade libavcodec-extra58Upgrade libavformat58Upgrade libavfilter7Upgrade libswscale5Upgrade libavformat-ffmpeg56Upgrade libavutil-ffmpeg54Upgrade libavutil55Upgrade libavresample4Upgrade libavcodec57Upgrade libavutil56Upgrade libpostproc54Upgrade libavcodec-ffmpeg56Upgrade libswscale-ffmpeg3Upgrade libswscale4Upgrade libavdevice-ffmpeg56Upgrade libavdevice57Upgrade libpostproc-ffmpeg53Upgrade libavformat57Upgrade libavcodec58Upgrade libavfilter-ffmpeg5Upgrade libavfilter-extra6Upgrade libavcodec-extra57Upgrade libavresample3Upgrade libavfilter6Upgrade libpostproc55Upgrade libavcodec-ffmpeg-extra56Upgrade libswresample3Upgrade ffmpegUpgrade libavresample-ffmpeg2Upgrade libswresample-ffmpeg1Upgrade libswresample2Upgrade libavdevice58Upgrade libavfilter-extra7 | Aug 5, 2020 | Jun 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub