Integer signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed 4X movie file with a large current_track value, which triggers a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpegUpgrade mplayer | Jul 30, 2024 | Feb 2, 2009 |
| Ffmpeg | — | Upgrade to FFmpeg version 0.5 | Sep 29, 2017 | Feb 2, 2009 |
| Freebsd | — | Upgrade ffmpegUpgrade libxine | Dec 10, 2025 | May 17, 2009 |
| Gentoo Linux | — | Upgrade media-plugins/gst-plugins-ffmpeg.Upgrade media-video/ffmpeg.Upgrade media-video/mplayer. | Oct 30, 2017 | Feb 2, 2009 |
| Ubuntu | — | Upgrade libavcodec1dUpgrade libavcodec51Upgrade libavformat1dUpgrade libavformat52 | Nov 8, 2024 | Feb 2, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub