The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Integer signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed 4X movie file with a large current_track value, which triggers a NULL pointer dereference.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpegUpgrade mplayer | Jul 30, 2024 | Feb 2, 2009 |
| Ffmpeg | — | Upgrade to FFmpeg version 0.5 | Sep 29, 2017 | Feb 2, 2009 |
| Freebsd | — | Upgrade libxineUpgrade ffmpeg | Dec 10, 2025 | May 17, 2009 |
| Gentoo Linux | — | Upgrade media-video/ffmpeg.Upgrade media-plugins/gst-plugins-ffmpeg.Upgrade media-video/mplayer. | Oct 30, 2017 | Feb 2, 2009 |
| Ubuntu | — | Upgrade libavformat1dUpgrade libavcodec1dUpgrade libavcodec51Upgrade libavformat52 | Nov 8, 2024 | Feb 2, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub