An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Aug 17, 2022 | Sep 20, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.2.6Upgrade to FFmpeg version 3.4.10Upgrade to FFmpeg version 4.1.9Upgrade to FFmpeg version 4.3 | Sep 27, 2021 | Sep 20, 2021 |
| Suse | — | Upgrade libavcodec-develUpgrade libavutil-develUpgrade libavdevice-develUpgrade libswresample2Upgrade libavfilter6-32bitUpgrade libavformat-develUpgrade libpostproc54-32bitUpgrade libavresample-develUpgrade libswresample-develUpgrade libpostproc54Upgrade libavresample3-64bitUpgrade libswscale4Upgrade libswscale4-32bitUpgrade libavutil55Upgrade libavfilter-develUpgrade libavcodec57-32bitUpgrade libavutil55-32bitUpgrade libswscale-develUpgrade libpostproc-develUpgrade libavfilter6Upgrade ffmpegUpgrade libavdevice57Upgrade libavcodec57Upgrade libswresample2-32bitUpgrade libavresample3Upgrade libavdevice57-32bitUpgrade libavformat57Upgrade libavresample3-32bitUpgrade ffmpeg-private-develUpgrade libavformat57-32bit | Oct 27, 2021 | Sep 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub