A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, which might lead to memory corruption and other potential consequences.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Aug 16, 2021 | May 27, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.8Upgrade to FFmpeg version 2.8.20Upgrade to FFmpeg version 3.4.11Upgrade to FFmpeg version 3.2.18Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 4.2.7 | Jun 7, 2021 | May 27, 2021 |
| Suse | — | Upgrade libavutil55-32bitUpgrade libswresample2-32bitUpgrade libavutil-develUpgrade libpostproc54Upgrade libavutil55Upgrade libavresample3-32bitUpgrade libavformat57-32bitUpgrade libavdevice57Upgrade libavcodec57Upgrade libavdevice-develUpgrade libavcodec-develUpgrade libavformat-develUpgrade libswscale-develUpgrade libavdevice57-32bitUpgrade libswresample-develUpgrade libavformat57Upgrade libavresample-develUpgrade libavfilter-develUpgrade libavfilter6Upgrade libswresample2Upgrade libpostproc54-32bitUpgrade libpostproc-develUpgrade libswscale4Upgrade ffmpeg-private-develUpgrade ffmpegUpgrade libavfilter6-32bitUpgrade libswscale4-32bitUpgrade libavresample3Upgrade libavcodec57-32bit | Jul 17, 2021 | May 27, 2021 |
| Ubuntu | — | Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavfilter-extra6Upgrade libavformat58Upgrade libavresample4Upgrade libavdevice57Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libswscale5Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libpostproc54Upgrade libswresample3Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavutil55Upgrade libavcodec-extra58Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavformat-extra58Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavfilter-extra7Upgrade libavcodec57Upgrade libavfilter6Upgrade ffmpegUpgrade libavformat57Upgrade libavcodec-extra57Upgrade libavutil56Upgrade libavcodec58Upgrade libswresample2Upgrade libswscale4Upgrade libavdevice58Upgrade libpostproc55Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavresample3Upgrade libavfilter7Upgrade libavcodec-extra (Ubuntu Pro) | Jun 9, 2022 | May 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub