FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | May 25, 2021 |
| Debian | — | Upgrade ffmpeg | Nov 4, 2022 | May 25, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3.3Upgrade to FFmpeg version 4.4 | May 28, 2021 | May 25, 2021 |
| Ubuntu | — | Upgrade libavcodec57Upgrade libswscale5Upgrade libavformat-extra58Upgrade libswresample3Upgrade libavdevice57Upgrade libavformat57Upgrade libavresample3Upgrade libpostproc55Upgrade libavfilter-extra6Upgrade libavfilter6Upgrade ffmpegUpgrade libavcodec-extra57Upgrade libavutil56Upgrade libavfilter7Upgrade libswresample2Upgrade libavformat58Upgrade libavresample4Upgrade libavutil55Upgrade libavcodec-extra58Upgrade libavdevice58Upgrade libswscale4Upgrade libavfilter-extra7Upgrade libavcodec58Upgrade libpostproc54 | Jun 9, 2022 | May 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub