A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, which might lead to memory corruption and other potential consequences.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | May 27, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.8Upgrade to FFmpeg version 4.3 | Jun 7, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade libavfilter6Upgrade libswscale5Upgrade libpostproc55Upgrade libavformat58Upgrade libavcodec-extra57Upgrade libpostproc54Upgrade libswresample3Upgrade libavformat-extra58Upgrade libavutil55Upgrade libavfilter7Upgrade libavresample4Upgrade libavfilter-extra7Upgrade libavcodec-extra58Upgrade libavcodec58Upgrade libavdevice58Upgrade libavformat57Upgrade libavdevice57Upgrade libavcodec57Upgrade ffmpegUpgrade libswscale4Upgrade libavresample3Upgrade libswresample2Upgrade libavutil56Upgrade libavfilter-extra6 | Jun 9, 2022 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub