libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Jun 28, 2024 | Mar 29, 2023 |
| Ffmpeg | — | Upgrade to FFmpeg version 5.0.1Upgrade to FFmpeg version 4.3.7Upgrade to FFmpeg version 5.1.2Upgrade to FFmpeg version 6.0Upgrade to FFmpeg version 4.4.3 | Apr 10, 2023 | Mar 29, 2023 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg. | Dec 27, 2023 | Mar 29, 2023 |
| Suse | — | Upgrade libavresample3Upgrade ffmpeg-4-libavfilter-develUpgrade libswscale4Upgrade libavcodec-develUpgrade ffmpeg-4-libavdevice-develUpgrade libavdevice57Upgrade libavcodec58_134Upgrade libavformat57-32bitUpgrade libavutil56_70Upgrade libavfilter7_110Upgrade libavresample3-32bitUpgrade libavutil55-32bitUpgrade ffmpeg-4Upgrade ffmpeg-4-libavcodec-develUpgrade libavformat58_76-32bitUpgrade ffmpeg-4-libavresample-develUpgrade ffmpeg-4-libswscale-develUpgrade libavcodec58_134-32bitUpgrade libavdevice-develUpgrade libavutil55Upgrade libswresample3_9Upgrade libswscale4-32bitUpgrade libavresample4_0Upgrade libavresample4_0-32bitUpgrade libavformat57Upgrade libavfilter7_110-32bitUpgrade libswresample2-32bitUpgrade ffmpegUpgrade libswscale-develUpgrade ffmpeg-4-libswresample-develUpgrade ffmpeg-4-libavutil-develUpgrade libswresample-develUpgrade libavfilter6Upgrade libpostproc55_9Upgrade libavdevice58_13Upgrade libswresample3_9-32bitUpgrade libavcodec57-32bitUpgrade libswresample2Upgrade libavformat-develUpgrade libavresample-develUpgrade libswscale5_9Upgrade libavdevice58_13-32bitUpgrade libavutil56_70-32bitUpgrade libswscale5_9-32bitUpgrade libpostproc54-32bitUpgrade libavfilter-develUpgrade libavcodec57Upgrade libavdevice57-32bitUpgrade libavutil-develUpgrade ffmpeg-4-libpostproc-develUpgrade libpostproc54Upgrade libpostproc-develUpgrade libavfilter6-32bitUpgrade ffmpeg-4-libavformat-develUpgrade libpostproc55_9-32bitUpgrade ffmpeg-private-develUpgrade ffmpeg-4-private-develUpgrade libavformat58_76 | May 3, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade libavfilter-extra (Ubuntu Pro)Upgrade libswscale5 (Ubuntu Pro)Upgrade libavcodec57 (Ubuntu Pro)Upgrade libpostproc54 (Ubuntu Pro)Upgrade libswresample2 (Ubuntu Pro)Upgrade libswscale4 (Ubuntu Pro)Upgrade libavfilter7 (Ubuntu Pro)Upgrade libavformat-extra58 (Ubuntu Pro)Upgrade libpostproc55 (Ubuntu Pro)Upgrade libavcodec-extra58 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavdevice57 (Ubuntu Pro)Upgrade libavutil56 (Ubuntu Pro)Upgrade libavutil55 (Ubuntu Pro)Upgrade libavfilter6 (Ubuntu Pro)Upgrade libswscale-dev (Ubuntu Pro)Upgrade libavresample4 (Ubuntu Pro)Upgrade libavformat58 (Ubuntu Pro)Upgrade libswresample3 (Ubuntu Pro)Upgrade libavfilter-extra6 (Ubuntu Pro)Upgrade libavfilter-extra7 (Ubuntu Pro)Upgrade libavformat-extra (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-extra57 (Ubuntu Pro)Upgrade libavresample3 (Ubuntu Pro)Upgrade libavdevice58 (Ubuntu Pro)Upgrade libavcodec58 (Ubuntu Pro)Upgrade libavformat57 (Ubuntu Pro) | Oct 25, 2023 | Mar 29, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub