FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | May 25, 2021 |
| Debian | — | Upgrade ffmpeg | Nov 4, 2022 | May 25, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.4Upgrade to FFmpeg version 4.3.3 | May 28, 2021 | May 25, 2021 |
| Ubuntu | — | Upgrade libavformat-extra58Upgrade ffmpegUpgrade libavcodec57Upgrade libpostproc55Upgrade libavcodec-extra57Upgrade libavfilter6Upgrade libavdevice57Upgrade libavfilter-extra6Upgrade libswresample3Upgrade libswscale5Upgrade libavutil56Upgrade libavformat57Upgrade libavresample3Upgrade libavutil55Upgrade libavresample4Upgrade libavformat58Upgrade libswresample2Upgrade libpostproc54Upgrade libavcodec58Upgrade libavfilter7Upgrade libswscale4Upgrade libavfilter-extra7Upgrade libavdevice58Upgrade libavcodec-extra58 | Jun 9, 2022 | May 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub