Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | May 24, 2021 |
| Debian | — | Upgrade ffmpeg | Aug 16, 2021 | May 24, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 2.8.20Upgrade to FFmpeg version 3.2.18Upgrade to FFmpeg version 4.3.5Upgrade to FFmpeg version 4.1.8Upgrade to FFmpeg version 4.4Upgrade to FFmpeg version 3.4.11Upgrade to FFmpeg version 4.2.7 | May 31, 2021 | May 24, 2021 |
| Suse | — | Upgrade libavresample3-32bitUpgrade libswresample2-32bitUpgrade libpostproc-develUpgrade libavutil-develUpgrade libavresample3Upgrade libavutil55Upgrade libavfilter6-32bitUpgrade libavdevice-develUpgrade libavcodec57-32bitUpgrade libavformat57-32bitUpgrade libavcodec-develUpgrade libavformat57Upgrade libavdevice57Upgrade ffmpeg-private-develUpgrade libavresample-develUpgrade libswresample-develUpgrade ffmpegUpgrade libavfilter-develUpgrade libswscale4Upgrade libpostproc54Upgrade libavformat-develUpgrade libavutil55-32bitUpgrade libavcodec57Upgrade libswscale4-32bitUpgrade libswscale-develUpgrade libpostproc54-32bitUpgrade libavfilter6Upgrade libswresample2Upgrade libavdevice57-32bit | Jul 15, 2021 | May 24, 2021 |
| Ubuntu | — | Upgrade libavutil55Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libswresample3Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libswscale5Upgrade ffmpeg (Ubuntu Pro)Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libpostproc55Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter6Upgrade libavcodec-extra57Upgrade libavformat58Upgrade libpostproc54Upgrade libavfilter-extra7Upgrade libavutil56Upgrade libavcodec-extra58Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter7Upgrade libavdevice57Upgrade libavdevice58Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavfilter-extra6Upgrade libavcodec58Upgrade libavresample3Upgrade libavresample4Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec57Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libswresample2Upgrade ffmpegUpgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavformat57Upgrade libswscale4 | Jun 9, 2022 | May 24, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub