Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | May 24, 2021 |
| Debian | — | Upgrade ffmpeg | Aug 16, 2021 | May 24, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3.5Upgrade to FFmpeg version 2.8.20Upgrade to FFmpeg version 3.2.18Upgrade to FFmpeg version 4.1.8Upgrade to FFmpeg version 4.4Upgrade to FFmpeg version 4.2.7Upgrade to FFmpeg version 3.4.11 | May 31, 2021 | May 24, 2021 |
| Suse | — | Upgrade libavresample-develUpgrade ffmpeg-private-develUpgrade libswresample2Upgrade libswscale-develUpgrade libavfilter6Upgrade libavdevice57Upgrade libavdevice57-32bitUpgrade libpostproc54-32bitUpgrade libpostproc54Upgrade libswresample-develUpgrade ffmpegUpgrade libswscale4-32bitUpgrade libswscale4Upgrade libavutil55-32bitUpgrade libavformat-develUpgrade libavfilter-develUpgrade libavcodec57Upgrade libavresample3Upgrade libavformat57Upgrade libavformat57-32bitUpgrade libavresample3-32bitUpgrade libavutil-develUpgrade libavcodec-develUpgrade libavcodec57-32bitUpgrade libavdevice-develUpgrade libavfilter6-32bitUpgrade libavutil55Upgrade libpostproc-develUpgrade libswresample2-32bit | Jul 15, 2021 | May 24, 2021 |
| Ubuntu | — | Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavutil55Upgrade libavcodec-extra57Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libswscale5Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libswresample3Upgrade libpostproc55Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libpostproc54Upgrade ffmpeg (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavfilter6Upgrade libavformat58Upgrade libavformat57Upgrade libswscale4Upgrade libavfilter-extra7Upgrade libavutil56Upgrade libavcodec58Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavdevice58Upgrade libavresample4Upgrade libavcodec57Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavdevice57Upgrade ffmpegUpgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter7Upgrade libavcodec-extra58Upgrade libswresample2Upgrade libavresample3Upgrade libavfilter-extra6 | Jun 9, 2022 | May 24, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub