FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Jun 7, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 7, 2020 |
| Debian | — | Upgrade ffmpeg | Jul 10, 2020 | Jun 7, 2020 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.6Upgrade to FFmpeg version 2.8.17Upgrade to FFmpeg version 4.0.6Upgrade to FFmpeg version 3.2.15Upgrade to FFmpeg version 4.3.1Upgrade to FFmpeg version 4.2.4Upgrade to FFmpeg version 3.4.8Upgrade to FFmpeg version 4.4 | Jun 15, 2020 | Jun 7, 2020 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Jul 29, 2020 | Jun 7, 2020 |
| Suse | — | Upgrade libavdevice57-32bitUpgrade libpostproc54Upgrade libswscale-develUpgrade libswresample2-32bitUpgrade libavcodec57Upgrade libavformat57-32bitUpgrade libswresample-develUpgrade ffmpeg-private-develUpgrade libswscale4-32bitUpgrade libpostproc54-32bitUpgrade libavcodec57-32bitUpgrade libavfilter6-32bitUpgrade ffmpegUpgrade libavfilter6Upgrade libavutil55Upgrade libavutil-develUpgrade libavutil55-32bitUpgrade libavresample3Upgrade libavfilter-develUpgrade libavcodec-develUpgrade libavdevice57Upgrade libpostproc-develUpgrade libswresample2Upgrade libswscale4Upgrade libavdevice-develUpgrade libavformat57Upgrade libavresample3-32bitUpgrade libavresample-develUpgrade libavformat-devel | Jul 15, 2021 | Jun 7, 2020 |
| Ubuntu | — | Upgrade libavresample-ffmpeg2Upgrade libswresample-ffmpeg1Upgrade libavfilter-extra6Upgrade libavfilter-ffmpeg5Upgrade libpostproc55Upgrade libavfilter6Upgrade libavresample3Upgrade ffmpegUpgrade libswresample3Upgrade libavcodec58Upgrade libavdevice58Upgrade libavcodec-ffmpeg-extra56Upgrade libavfilter-extra7Upgrade libswresample2Upgrade libavdevice57Upgrade libavcodec-extra57Upgrade libavformat57Upgrade libpostproc-ffmpeg53Upgrade libavdevice-ffmpeg56Upgrade libavutil-ffmpeg54Upgrade libavutil55Upgrade libavcodec-ffmpeg56Upgrade libswscale5Upgrade libavcodec-extra58Upgrade libavutil56Upgrade libavformat-ffmpeg56Upgrade libswscale4Upgrade libavcodec57Upgrade libpostproc54Upgrade libavresample4Upgrade libswscale-ffmpeg3Upgrade libavfilter7Upgrade libavformat58 | Aug 5, 2020 | Jun 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub