Name: CVE-2021-38114: Unchecked Return Value
Creator: Rapid7
Published: 2021-08-04T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-38114, CWE-252, CVSS 5.5, EPSS 0.01031

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.

CVSS Details

CVSS 3.1 Base Score: 5.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade ffmpegUpgrade ffmpeg4	Aug 22, 2024	Aug 4, 2021
Debian	—	Upgrade ffmpeg	Aug 16, 2021	Aug 4, 2021
Ffmpeg	—	Upgrade to FFmpeg version 4.4	Aug 13, 2021	Aug 4, 2021
Suse	—	Upgrade libavformat57-32bitUpgrade libavcodec58_134Upgrade libavdevice57-32bitUpgrade libavresample4_0Upgrade libavresample3-32bitUpgrade libpostproc54Upgrade libswresample2-32bitUpgrade libavutil55Upgrade libavcodec57Upgrade libavutil56_70Upgrade libavutil-develUpgrade libswresample-develUpgrade libpostproc55_9Upgrade libavutil55-32bitUpgrade libavfilter-develUpgrade libpostproc54-32bitUpgrade libavformat57Upgrade libavcodec57-32bitUpgrade libpostproc-develUpgrade libavdevice58_13Upgrade libavfilter7_110Upgrade ffmpeg-private-develUpgrade libavresample3-64bitUpgrade libswscale5_9Upgrade libavformat-develUpgrade libswscale4-32bitUpgrade libavresample-develUpgrade libavfilter6-32bitUpgrade libswresample2Upgrade libavdevice57Upgrade ffmpegUpgrade libavresample3Upgrade libavfilter6Upgrade libavcodec-develUpgrade libswscale-develUpgrade libswscale4Upgrade libavformat58_76Upgrade libswresample3_9Upgrade libavdevice-devel	Sep 3, 2021	Aug 4, 2021
Ubuntu	—	Upgrade libavformat-extra58Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavdevice57Upgrade libavresample3Upgrade libavformat57Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade ffmpegUpgrade libavutil56Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavfilter7Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavcodec57Upgrade libavcodec-extra57Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavfilter-extra6Upgrade libavcodec58Upgrade libavresample4Upgrade libavdevice58Upgrade libavfilter-extra7Upgrade libavcodec-extra58Upgrade libswscale4Upgrade libpostproc55Upgrade libswscale5Upgrade libavfilter6Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavutil55Upgrade ffmpeg (Ubuntu Pro)Upgrade libavformat58Upgrade libpostproc54Upgrade libswresample2Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libswresample3	Jun 9, 2022	Aug 4, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence