libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jun 28, 2024 | Mar 29, 2023 |
| Ffmpeg | — | Upgrade to FFmpeg version 6.0Upgrade to FFmpeg version 4.4.3Upgrade to FFmpeg version 5.1.2Upgrade to FFmpeg version 4.3.7Upgrade to FFmpeg version 5.0.1 | Apr 10, 2023 | Mar 29, 2023 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Dec 27, 2023 | Mar 29, 2023 |
| Suse | — | Upgrade libavformat57Upgrade libavcodec-develUpgrade libavcodec58_134Upgrade ffmpeg-4-libavdevice-develUpgrade libavresample3Upgrade libavdevice-develUpgrade libavresample4_0Upgrade libavcodec58_134-32bitUpgrade libavformat57-32bitUpgrade ffmpeg-4-libavfilter-develUpgrade libswresample3_9Upgrade libavfilter7_110Upgrade ffmpeg-4-libavcodec-develUpgrade libavformat58_76-32bitUpgrade libavresample3-32bitUpgrade libavutil56_70Upgrade ffmpeg-4-libswscale-develUpgrade libswscale4Upgrade libavdevice57Upgrade libavutil55-32bitUpgrade libavresample4_0-32bitUpgrade libavutil55Upgrade libswscale4-32bitUpgrade ffmpeg-4Upgrade ffmpeg-4-libavresample-develUpgrade libavfilter6Upgrade libavutil-develUpgrade libavresample-develUpgrade libavdevice58_13-32bitUpgrade ffmpeg-4-libpostproc-develUpgrade libswscale5_9Upgrade libswresample3_9-32bitUpgrade libswresample2-32bitUpgrade libavfilter7_110-32bitUpgrade ffmpegUpgrade libavutil56_70-32bitUpgrade libavdevice58_13Upgrade libavcodec57Upgrade libavcodec57-32bitUpgrade libswresample2Upgrade libavfilter6-32bitUpgrade libswresample-develUpgrade ffmpeg-4-libavformat-develUpgrade libpostproc55_9-32bitUpgrade libavdevice57-32bitUpgrade libavfilter-develUpgrade libswscale5_9-32bitUpgrade libpostproc54-32bitUpgrade libpostproc55_9Upgrade libavformat58_76Upgrade ffmpeg-private-develUpgrade ffmpeg-4-private-develUpgrade ffmpeg-4-libswresample-develUpgrade ffmpeg-4-libavutil-develUpgrade libswscale-develUpgrade libpostproc54Upgrade libavformat-develUpgrade libpostproc-devel | May 3, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade libswscale-dev (Ubuntu Pro)Upgrade libavresample4 (Ubuntu Pro)Upgrade libavfilter-extra6 (Ubuntu Pro)Upgrade libavcodec58 (Ubuntu Pro)Upgrade libswresample3 (Ubuntu Pro)Upgrade libavformat57 (Ubuntu Pro)Upgrade libavfilter-extra7 (Ubuntu Pro)Upgrade libavcodec-extra57 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libavresample3 (Ubuntu Pro)Upgrade libavdevice58 (Ubuntu Pro)Upgrade libavformat-extra (Ubuntu Pro)Upgrade libavformat58 (Ubuntu Pro)Upgrade libavformat-extra58 (Ubuntu Pro)Upgrade libpostproc55 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libswresample2 (Ubuntu Pro)Upgrade libswscale4 (Ubuntu Pro)Upgrade libavdevice57 (Ubuntu Pro)Upgrade libavutil56 (Ubuntu Pro)Upgrade libavcodec57 (Ubuntu Pro)Upgrade libavcodec-extra58 (Ubuntu Pro)Upgrade libpostproc54 (Ubuntu Pro)Upgrade libavfilter6 (Ubuntu Pro)Upgrade libavfilter-extra (Ubuntu Pro)Upgrade libavfilter7 (Ubuntu Pro)Upgrade libavutil55 (Ubuntu Pro)Upgrade libswscale5 (Ubuntu Pro) | Oct 25, 2023 | Mar 29, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub