Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | May 26, 2021 |
| Debian | — | Upgrade ffmpeg | Aug 16, 2021 | May 26, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3 | Jun 4, 2021 | May 26, 2021 |
| Suse | — | Upgrade libswscale4Upgrade libavcodec-develUpgrade libswscale4-32bitUpgrade libpostproc54-32bitUpgrade libavresample-develUpgrade libavfilter-develUpgrade libavresample3-32bitUpgrade libavresample3Upgrade libavdevice-develUpgrade libavformat57Upgrade libavdevice57Upgrade libswresample2Upgrade libavutil55-32bitUpgrade ffmpegUpgrade libavformat-develUpgrade libavdevice57-32bitUpgrade ffmpeg-private-develUpgrade libavcodec57Upgrade libswscale-develUpgrade libavutil-develUpgrade libavcodec57-32bitUpgrade libavformat57-32bitUpgrade libavfilter6-32bitUpgrade libpostproc-develUpgrade libswresample-develUpgrade libswresample2-32bitUpgrade libavutil55Upgrade libavfilter6Upgrade libpostproc54 | Jul 15, 2021 | May 26, 2021 |
| Ubuntu | — | Upgrade libavformat58Upgrade libavfilter7Upgrade libavdevice57Upgrade libpostproc55Upgrade libswscale5Upgrade libavcodec-extra57Upgrade libavfilter6Upgrade libavutil55Upgrade libavformat57Upgrade libavutil56Upgrade libavformat-extra58Upgrade libavcodec57Upgrade libavresample3Upgrade libswresample3Upgrade libavfilter-extra6Upgrade ffmpegUpgrade libavfilter-extra7Upgrade libswscale4Upgrade libavcodec-extra58Upgrade libswresample2Upgrade libavcodec58Upgrade libavdevice58Upgrade libpostproc54Upgrade libavresample4 | Jun 9, 2022 | May 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub