A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Aug 17, 2022 | Aug 10, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3.2 | Aug 18, 2021 | Aug 10, 2021 |
| Suse | — | Upgrade libavutil55-32bitUpgrade libswscale4-32bitUpgrade libpostproc54Upgrade ffmpeg-private-develUpgrade libavformat-develUpgrade libswresample2Upgrade libavdevice57Upgrade libswscale4Upgrade libavfilter-develUpgrade libavresample-develUpgrade libavdevice-develUpgrade libavresample3-32bitUpgrade libavutil55Upgrade ffmpegUpgrade libavcodec57Upgrade libpostproc54-32bitUpgrade libavformat57Upgrade libavfilter6Upgrade libswresample-develUpgrade libavcodec57-32bitUpgrade libavresample3-64bitUpgrade libavcodec-develUpgrade libavfilter6-32bitUpgrade libavutil-develUpgrade libavresample3Upgrade libpostproc-develUpgrade libswresample2-32bitUpgrade libswscale-develUpgrade libavformat57-32bitUpgrade libavdevice57-32bit | Sep 3, 2021 | Aug 10, 2021 |
| Ubuntu | — | Upgrade libavfilter7Upgrade libpostproc54Upgrade libavcodec58Upgrade libavfilter6Upgrade libswresample2Upgrade libavcodec-extra58Upgrade libavutil56Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavdevice58Upgrade libpostproc55Upgrade libavfilter-extra7Upgrade libavcodec-extra57Upgrade libswscale5Upgrade libavdevice57Upgrade libavresample4Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavutil55Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade ffmpegUpgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libswresample3Upgrade libavformat57Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec57Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavresample3Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libswscale4Upgrade libavformat58Upgrade libavfilter-extra6Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro) | Jun 9, 2022 | Aug 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub