A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | May 27, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 4.1.8 | Jun 7, 2021 | May 27, 2021 |
| Suse | — | Upgrade libavcodec57Upgrade libswscale4-32bitUpgrade libavresample3-32bitUpgrade ffmpegUpgrade libavformat57Upgrade libpostproc54-32bitUpgrade libavdevice57Upgrade libavresample-develUpgrade ffmpeg-private-develUpgrade libavresample3Upgrade libavformat-develUpgrade libswresample2Upgrade libswscale-develUpgrade libavfilter-develUpgrade libavdevice57-32bitUpgrade libavutil55-32bitUpgrade libswscale4Upgrade libavutil55Upgrade libpostproc54Upgrade libavcodec57-32bitUpgrade libavutil-develUpgrade libpostproc-develUpgrade libavfilter6-32bitUpgrade libavfilter6Upgrade libswresample2-32bitUpgrade libavformat57-32bitUpgrade libavdevice-develUpgrade libswresample-develUpgrade libavcodec-devel | Jul 15, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade libswscale4Upgrade libavcodec58Upgrade libpostproc54Upgrade libavcodec-extra58Upgrade libavcodec-extra57Upgrade libpostproc55Upgrade libavfilter6Upgrade libavresample4Upgrade libavdevice58Upgrade libswscale5Upgrade libavfilter7Upgrade libavutil56Upgrade ffmpegUpgrade libavdevice57Upgrade libswresample3Upgrade libavcodec57Upgrade libavutil55Upgrade libavformat58Upgrade libavfilter-extra6Upgrade libavformat-extra58Upgrade libavresample3Upgrade libavfilter-extra7Upgrade libswresample2Upgrade libavformat57 | Jun 9, 2022 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub