A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Aug 17, 2022 | Aug 10, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3.2 | Aug 18, 2021 | Aug 10, 2021 |
| Suse | — | Upgrade libavresample3-64bitUpgrade libavcodec-develUpgrade libavutil-develUpgrade libavdevice57-32bitUpgrade libpostproc-develUpgrade libswresample-develUpgrade libavformat57-32bitUpgrade libavfilter6-32bitUpgrade libswresample2-32bitUpgrade libavcodec57Upgrade libswscale-develUpgrade libavfilter6Upgrade libpostproc54-32bitUpgrade libavcodec57-32bitUpgrade libavformat57Upgrade libavresample3Upgrade ffmpegUpgrade libswscale4Upgrade libavutil55-32bitUpgrade libavfilter-develUpgrade libavdevice-develUpgrade libavutil55Upgrade libswscale4-32bitUpgrade ffmpeg-private-develUpgrade libavdevice57Upgrade libavresample-develUpgrade libavresample3-32bitUpgrade libavformat-develUpgrade libpostproc54Upgrade libswresample2 | Sep 3, 2021 | Aug 10, 2021 |
| Ubuntu | — | Upgrade libavformat57Upgrade libavresample3Upgrade libavfilter-extra6Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavformat58Upgrade libavcodec-extra (Ubuntu Pro)Upgrade ffmpegUpgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavresample4Upgrade libswscale4Upgrade libavutil55Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libswresample3Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavdevice57Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavcodec57Upgrade ffmpeg (Ubuntu Pro)Upgrade libavdevice58Upgrade libswresample2Upgrade libavfilter6Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavcodec-extra58Upgrade libpostproc54Upgrade libavfilter7Upgrade libavcodec-extra57Upgrade libavfilter-extra7Upgrade libpostproc55Upgrade libavutil56Upgrade libavcodec58Upgrade libswscale5 | Jun 9, 2022 | Aug 10, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub