decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Jan 4, 2021 |
| Debian | — | Upgrade ffmpeg | Feb 1, 2021 | Jan 4, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 3.2.16Upgrade to FFmpeg version 4.1.7Upgrade to FFmpeg version 4.4Upgrade to FFmpeg version 2.8.18Upgrade to FFmpeg version 3.4.9Upgrade to FFmpeg version 4.3.2Upgrade to FFmpeg version 4.2.5 | Jan 7, 2021 | Jan 4, 2021 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | May 28, 2021 | Jan 4, 2021 |
| Suse | — | Upgrade libpostproc-develUpgrade libavdevice57-32bitUpgrade libpostproc54-32bitUpgrade libavresample3-64bitUpgrade ffmpegUpgrade libavcodec57Upgrade libpostproc54Upgrade libswresample-develUpgrade libavdevice57Upgrade libavfilter-develUpgrade libavfilter6Upgrade libavfilter6-32bitUpgrade libavresample-develUpgrade libavutil55-32bitUpgrade libswresample2Upgrade libavformat-develUpgrade libswscale-develUpgrade ffmpeg-private-develUpgrade libavutil-develUpgrade libavresample3Upgrade libavformat57-32bitUpgrade libavresample3-32bitUpgrade libavcodec-develUpgrade libavutil55Upgrade libavformat57Upgrade libswresample2-32bitUpgrade libswscale4Upgrade libavdevice-develUpgrade libswscale4-32bitUpgrade libavcodec57-32bit | Oct 27, 2021 | Jan 4, 2021 |
| Ubuntu | — | Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavformat57Upgrade libavfilter7Upgrade libavformat58Upgrade libswresample3Upgrade libavfilter6Upgrade libswscale5Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavcodec57Upgrade libavresample3Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavcodec-extra57Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libpostproc55Upgrade libavutil55Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libpostproc54Upgrade ffmpeg (Ubuntu Pro)Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavcodec-extra58Upgrade libswresample2Upgrade libavresample4Upgrade libavfilter-extra7Upgrade libavdevice58Upgrade libavutil56Upgrade libavfilter-extra6Upgrade libavcodec58Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libswscale4Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavdevice57Upgrade ffmpeg | Jun 9, 2022 | Jan 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub