A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, which might lead to memory corruption and other potential consequences.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | May 27, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.8Upgrade to FFmpeg version 4.3 | Jun 7, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade libavcodec-extra58Upgrade ffmpegUpgrade libavformat57Upgrade libavcodec58Upgrade libswscale4Upgrade libavfilter7Upgrade libavutil56Upgrade libavfilter-extra7Upgrade libavfilter-extra6Upgrade libavcodec57Upgrade libavresample4Upgrade libavresample3Upgrade libavdevice57Upgrade libswresample2Upgrade libavdevice58Upgrade libavutil55Upgrade libavcodec-extra57Upgrade libpostproc54Upgrade libswresample3Upgrade libpostproc55Upgrade libswscale5Upgrade libavformat-extra58Upgrade libavformat58Upgrade libavfilter6 | Jun 9, 2022 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub