The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | May 27, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.8Upgrade to FFmpeg version 4.3 | Jun 7, 2021 | May 27, 2021 |
| Suse | — | Upgrade libswresample2-32bitUpgrade libavfilter6Upgrade libpostproc-develUpgrade libavformat57-32bitUpgrade libavfilter6-32bitUpgrade libavutil-develUpgrade libavcodec-develUpgrade libavcodec57-32bitUpgrade libpostproc54Upgrade libswresample-develUpgrade libavdevice-develUpgrade libswscale4-32bitUpgrade ffmpegUpgrade libavfilter-develUpgrade libswscale4Upgrade libavutil55Upgrade libswresample2Upgrade libavformat57Upgrade ffmpeg-private-develUpgrade libavcodec57Upgrade libavdevice57Upgrade libswscale-develUpgrade libpostproc54-32bitUpgrade libavresample-develUpgrade libavresample3Upgrade libavresample3-32bitUpgrade libavformat-develUpgrade libavutil55-32bitUpgrade libavdevice57-32bit | Jul 15, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade libpostproc55Upgrade libavfilter7Upgrade libavcodec58Upgrade libavresample4Upgrade libswscale5Upgrade libavcodec-extra57Upgrade libavcodec-extra58Upgrade libavdevice58Upgrade libpostproc54Upgrade libavfilter6Upgrade libswscale4Upgrade libavformat-extra58Upgrade libavformat57Upgrade libavformat58Upgrade libavresample3Upgrade libavutil55Upgrade libswresample3Upgrade libavutil56Upgrade libavdevice57Upgrade libavfilter-extra7Upgrade libswresample2Upgrade ffmpegUpgrade libavcodec57Upgrade libavfilter-extra6 | Jun 9, 2022 | May 27, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub