A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. It is possible to initiate the attack remotely. The name of the patch is 92f9b28ed84a77138105475beba16c146bdaf984. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213543.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-ffmpeg | Aug 22, 2024 | Nov 13, 2022 | |
| Debian | debian-upgrade-ffmpeg | Jul 30, 2024 | Nov 13, 2022 | |
| Ffmpeg | ffmpeg-upgrade-4_4_4ffmpeg-upgrade-5_0_3ffmpeg-upgrade-5_1_3ffmpeg-upgrade-6_0 | Nov 21, 2022 | Nov 13, 2022 | |
| Freebsd | freebsd-upgrade-package-ffmpegfreebsd-upgrade-package-ffmpeg4freebsd-upgrade-package-avidemuxfreebsd-upgrade-package-emby-serverfreebsd-upgrade-package-emby-server-develfreebsd-upgrade-package-handbrakefreebsd-upgrade-package-mythtvfreebsd-upgrade-package-mythtv-frontend | Apr 14, 2023 | Apr 7, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-media-video-ffmpeg | Dec 27, 2023 | Nov 13, 2022 | |
| Suse | — | suse-upgrade-ffmpeg-4suse-upgrade-ffmpeg-4-libavcodec-develsuse-upgrade-ffmpeg-4-libavdevice-develsuse-upgrade-ffmpeg-4-libavfilter-develsuse-upgrade-ffmpeg-4-libavformat-develsuse-upgrade-ffmpeg-4-libavresample-develsuse-upgrade-ffmpeg-4-libavutil-develsuse-upgrade-ffmpeg-4-libpostproc-develsuse-upgrade-ffmpeg-4-libswresample-develsuse-upgrade-ffmpeg-4-libswscale-develsuse-upgrade-ffmpeg-4-private-develsuse-upgrade-libavcodec58_134suse-upgrade-libavcodec58_134-32bitsuse-upgrade-libavdevice58_13suse-upgrade-libavdevice58_13-32bitsuse-upgrade-libavfilter7_110suse-upgrade-libavfilter7_110-32bitsuse-upgrade-libavformat58_76suse-upgrade-libavformat58_76-32bitsuse-upgrade-libavresample4_0suse-upgrade-libavresample4_0-32bitsuse-upgrade-libavutil56_70suse-upgrade-libavutil56_70-32bitsuse-upgrade-libpostproc55_9suse-upgrade-libpostproc55_9-32bitsuse-upgrade-libswresample3_9suse-upgrade-libswresample3_9-32bitsuse-upgrade-libswscale5_9suse-upgrade-libswscale5_9-32bit | Nov 24, 2022 | Nov 13, 2022 |
| Ubuntu | ubuntu-pro-upgrade-ffmpegubuntu-pro-upgrade-libav-toolsubuntu-pro-upgrade-libavcodec-extraubuntu-pro-upgrade-libavcodec-extra57ubuntu-pro-upgrade-libavcodec-extra58ubuntu-pro-upgrade-libavcodec-ffmpeg-extra56ubuntu-pro-upgrade-libavcodec-ffmpeg56ubuntu-pro-upgrade-libavcodec57ubuntu-pro-upgrade-libavcodec58ubuntu-pro-upgrade-libavdevice-ffmpeg56ubuntu-pro-upgrade-libavdevice57ubuntu-pro-upgrade-libavdevice58ubuntu-pro-upgrade-libavfilter-extraubuntu-pro-upgrade-libavfilter-extra6ubuntu-pro-upgrade-libavfilter-extra7ubuntu-pro-upgrade-libavfilter-ffmpeg5ubuntu-pro-upgrade-libavfilter6ubuntu-pro-upgrade-libavfilter7ubuntu-pro-upgrade-libavformat-extraubuntu-pro-upgrade-libavformat-extra58ubuntu-pro-upgrade-libavformat-ffmpeg56ubuntu-pro-upgrade-libavformat57ubuntu-pro-upgrade-libavformat58ubuntu-pro-upgrade-libavresample-ffmpeg2ubuntu-pro-upgrade-libavresample3ubuntu-pro-upgrade-libavresample4ubuntu-pro-upgrade-libavutil-ffmpeg54ubuntu-pro-upgrade-libavutil55ubuntu-pro-upgrade-libavutil56ubuntu-pro-upgrade-libpostproc-ffmpeg53ubuntu-pro-upgrade-libpostproc54ubuntu-pro-upgrade-libpostproc55ubuntu-pro-upgrade-libswresample-ffmpeg1ubuntu-pro-upgrade-libswresample2ubuntu-pro-upgrade-libswresample3ubuntu-pro-upgrade-libswscale-ffmpeg3ubuntu-pro-upgrade-libswscale4ubuntu-pro-upgrade-libswscale5ubuntu-upgrade-ffmpegubuntu-upgrade-libavcodec-extraubuntu-upgrade-libavcodec-extra59ubuntu-upgrade-libavcodec59ubuntu-upgrade-libavdevice59ubuntu-upgrade-libavfilter-extraubuntu-upgrade-libavfilter-extra8ubuntu-upgrade-libavfilter8ubuntu-upgrade-libavformat-extraubuntu-upgrade-libavformat-extra59ubuntu-upgrade-libavformat59ubuntu-upgrade-libavutil57ubuntu-upgrade-libpostproc56ubuntu-upgrade-libswresample4ubuntu-upgrade-libswscale6 | Mar 22, 2023 | Nov 13, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub