A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Aug 17, 2022 | Aug 10, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3.2 | Aug 19, 2021 | Aug 10, 2021 |
| Suse | — | Upgrade ffmpeg-private-develUpgrade ffmpegUpgrade libavcodec-develUpgrade libavfilter6Upgrade libavformat-develUpgrade libswscale-develUpgrade libswscale4Upgrade libavresample-develUpgrade libavfilter6-32bitUpgrade libavresample3Upgrade libavutil55-32bitUpgrade libavformat57Upgrade libavdevice-develUpgrade libpostproc54-32bitUpgrade libavresample3-64bitUpgrade libpostproc-develUpgrade libavdevice57Upgrade libswscale4-32bitUpgrade libswresample2Upgrade libavcodec57-32bitUpgrade libavfilter-develUpgrade libavcodec57Upgrade libswresample-develUpgrade libswresample2-32bitUpgrade libavutil55Upgrade libavdevice57-32bitUpgrade libavresample3-32bitUpgrade libavutil-develUpgrade libpostproc54Upgrade libavformat57-32bit | Sep 3, 2021 | Aug 10, 2021 |
| Ubuntu | — | Upgrade libavresample3Upgrade libswscale4Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libswresample3Upgrade libavcodec58Upgrade libavfilter-extra7Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavformat57Upgrade libavfilter-extra6Upgrade libavdevice58Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavformat58Upgrade libavutil55Upgrade libavresample4Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavdevice57Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libswscale5Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade ffmpegUpgrade libavcodec-extra57Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavfilter7Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libpostproc55Upgrade libavfilter6Upgrade libpostproc54Upgrade libavcodec-extra58Upgrade libavutil56Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec57Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libswresample2Upgrade libavfilter-ffmpeg5 (Ubuntu Pro) | Jun 9, 2022 | Aug 10, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub