An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Nov 4, 2022 | May 2, 2022 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.4.2Upgrade to FFmpeg version 5.1Upgrade to FFmpeg version 5.0.1Upgrade to FFmpeg version 4.3.4 | May 12, 2022 | May 2, 2022 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Dec 27, 2023 | May 2, 2022 |
| Ubuntu | — | Upgrade libavcodec-extra58Upgrade libavformat-extra58Upgrade libavresample4Upgrade ffmpegUpgrade libpostproc54Upgrade libavutil55Upgrade libavfilter7Upgrade libavutil56Upgrade libavcodec57Upgrade libavfilter-extra7Upgrade libavfilter-extra6Upgrade libavdevice57Upgrade libswresample2Upgrade libswscale4Upgrade libavcodec58Upgrade libavdevice58Upgrade libavformat57Upgrade libswresample3Upgrade libswscale5Upgrade libavfilter6Upgrade libpostproc55Upgrade libavformat58Upgrade libavresample3Upgrade libavcodec-extra57 | Jun 9, 2022 | May 2, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub