decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Jan 4, 2021 |
| Debian | — | Upgrade ffmpeg | Feb 1, 2021 | Jan 4, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.4Upgrade to FFmpeg version 3.2.16Upgrade to FFmpeg version 4.1.7Upgrade to FFmpeg version 3.4.9Upgrade to FFmpeg version 4.3.2Upgrade to FFmpeg version 2.8.18Upgrade to FFmpeg version 4.2.5 | Jan 7, 2021 | Jan 4, 2021 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | May 28, 2021 | Jan 4, 2021 |
| Suse | — | Upgrade libavdevice-develUpgrade libavresample3-32bitUpgrade libavformat57Upgrade libavutil55Upgrade libswresample2-32bitUpgrade libavresample3Upgrade libavutil-develUpgrade libavcodec57-32bitUpgrade libavformat57-32bitUpgrade libswscale4-32bitUpgrade libswscale4Upgrade libavcodec-develUpgrade libpostproc-develUpgrade libswscale-develUpgrade ffmpeg-private-develUpgrade libavcodec57Upgrade libavdevice57Upgrade libpostproc54-32bitUpgrade libavresample-develUpgrade libavfilter6Upgrade libavdevice57-32bitUpgrade libavresample3-64bitUpgrade ffmpegUpgrade libswresample-develUpgrade libpostproc54Upgrade libavfilter-develUpgrade libavutil55-32bitUpgrade libswresample2Upgrade libavformat-develUpgrade libavfilter6-32bit | Oct 27, 2021 | Jan 4, 2021 |
| Ubuntu | — | Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec-extra58Upgrade libavcodec58Upgrade ffmpeg (Ubuntu Pro)Upgrade libswscale4Upgrade libpostproc54Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavdevice57Upgrade libavfilter-extra6Upgrade libavresample4Upgrade ffmpegUpgrade libavutil56Upgrade libavdevice58Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavfilter-extra7Upgrade libswresample2Upgrade libavformat58Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libpostproc55Upgrade libswscale5Upgrade libavfilter6Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavformat57Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavutil55Upgrade libswresample3Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavcodec-extra57Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavfilter7Upgrade libavcodec57Upgrade libavresample3 | Jun 9, 2022 | Jan 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub