decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Jan 4, 2021 |
| Debian | — | Upgrade ffmpeg | Feb 1, 2021 | Jan 4, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.4Upgrade to FFmpeg version 4.1.7Upgrade to FFmpeg version 3.2.16Upgrade to FFmpeg version 4.3.2Upgrade to FFmpeg version 2.8.18Upgrade to FFmpeg version 4.2.5Upgrade to FFmpeg version 3.4.9 | Jan 7, 2021 | Jan 4, 2021 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | May 28, 2021 | Jan 4, 2021 |
| Suse | — | Upgrade libswresample-develUpgrade ffmpeg-private-develUpgrade libavcodec57Upgrade libpostproc-develUpgrade libavutil55-32bitUpgrade libpostproc54Upgrade libavfilter6-32bitUpgrade libswresample2Upgrade libswscale-develUpgrade libpostproc54-32bitUpgrade libavfilter-develUpgrade libavresample3-64bitUpgrade libavdevice57-32bitUpgrade libavformat-develUpgrade libavfilter6Upgrade libavresample-develUpgrade ffmpegUpgrade libavdevice57Upgrade libavcodec-develUpgrade libavdevice-develUpgrade libavutil-develUpgrade libavresample3-32bitUpgrade libavutil55Upgrade libavformat57-32bitUpgrade libswscale4-32bitUpgrade libavformat57Upgrade libswresample2-32bitUpgrade libswscale4Upgrade libavresample3Upgrade libavcodec57-32bit | Oct 27, 2021 | Jan 4, 2021 |
| Ubuntu | — | Upgrade libavdevice57Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavdevice58Upgrade libavutil56Upgrade libavfilter-extra7Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavcodec58Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libswscale4Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec-extra58Upgrade ffmpegUpgrade libpostproc54Upgrade libavfilter-extra6Upgrade ffmpeg (Ubuntu Pro)Upgrade libswresample2Upgrade libavresample4Upgrade libswscale5Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavformat58Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavformat57Upgrade libswresample3Upgrade libavfilter7Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavcodec57Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavresample3Upgrade libavutil55Upgrade libavcodec-extra57Upgrade libavfilter6Upgrade libpostproc55Upgrade libavcodec-ffmpeg56 (Ubuntu Pro) | Jun 9, 2022 | Jan 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub