A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, which might lead to memory corruption and other potential consequences.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | May 27, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 4.1.8 | Jun 7, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade libavformat-extra58Upgrade libavcodec-extra57Upgrade libpostproc55Upgrade libavformat58Upgrade libavfilter6Upgrade libswscale5Upgrade libswresample3Upgrade libpostproc54Upgrade ffmpegUpgrade libswscale4Upgrade libavfilter7Upgrade libavcodec57Upgrade libavcodec-extra58Upgrade libavformat57Upgrade libavdevice58Upgrade libavdevice57Upgrade libavutil55Upgrade libswresample2Upgrade libavresample3Upgrade libavresample4Upgrade libavutil56Upgrade libavfilter-extra7Upgrade libavfilter-extra6Upgrade libavcodec58 | Jun 9, 2022 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub