A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, which might lead to memory corruption and other potential consequences.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Aug 16, 2021 | May 27, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.8Upgrade to FFmpeg version 3.2.18Upgrade to FFmpeg version 2.8.20Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 3.4.11Upgrade to FFmpeg version 4.2.7 | Jun 7, 2021 | May 27, 2021 |
| Suse | — | Upgrade libswscale-develUpgrade ffmpegUpgrade libswscale4Upgrade ffmpeg-private-develUpgrade libavfilter6-32bitUpgrade libavcodec-develUpgrade libavresample-develUpgrade libavformat-develUpgrade libavdevice57-32bitUpgrade libavfilter-develUpgrade libswscale4-32bitUpgrade libavfilter6Upgrade libswresample-develUpgrade libavformat57Upgrade libswresample2Upgrade libavresample3Upgrade libpostproc-develUpgrade libpostproc54-32bitUpgrade libavcodec57-32bitUpgrade libswresample2-32bitUpgrade libavutil-develUpgrade libavresample3-32bitUpgrade libavdevice57Upgrade libavcodec57Upgrade libavutil55Upgrade libavutil55-32bitUpgrade libavdevice-develUpgrade libpostproc54Upgrade libavformat57-32bit | Jul 17, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libswresample3Upgrade libswscale5Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavresample4Upgrade ffmpeg (Ubuntu Pro)Upgrade libpostproc54Upgrade libavformat58Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavutil55Upgrade libavfilter-extra6Upgrade libavdevice57Upgrade libavcodec-extra58Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavfilter-extra7Upgrade libswscale4Upgrade libavcodec-extra57Upgrade libavcodec57Upgrade libavutil56Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libpostproc55Upgrade libavformat57Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavfilter7Upgrade libavresample3Upgrade ffmpegUpgrade libavdevice58Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavfilter6Upgrade libavformat-extra58Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libswresample2Upgrade libavcodec58 | Jun 9, 2022 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub