A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, which might lead to memory corruption and other potential consequences.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | May 27, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 4.1.8 | Jun 7, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade libavformat-extra58Upgrade libavfilter6Upgrade libpostproc55Upgrade libpostproc54Upgrade libavcodec-extra57Upgrade libswresample3Upgrade libavformat58Upgrade libswscale5Upgrade libswscale4Upgrade libavutil56Upgrade libavfilter-extra6Upgrade libavresample3Upgrade libavformat57Upgrade libavutil55Upgrade libavcodec58Upgrade libavdevice58Upgrade libavresample4Upgrade libavfilter-extra7Upgrade ffmpegUpgrade libavcodec-extra58Upgrade libavcodec57Upgrade libavfilter7Upgrade libswresample2Upgrade libavdevice57 | Jun 9, 2022 | May 27, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub