Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c655-qv2v-73rm

Опубликовано: 29 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

EPSS

Процентиль: 8%
0.00034
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 5.5
ubuntu
10 месяцев назад

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

CVSS3: 5.5
nvd
10 месяцев назад

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

CVSS3: 5.5
debian
10 месяцев назад

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c m ...

CVSS3: 6.2
fstec
10 месяцев назад

Уязвимость модуля avcodec/speexdec.c мультимедийной библиотеки Ffmpeg, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 9.8
redos
4 месяца назад

Множественные уязвимости ffmpeg

EPSS

Процентиль: 8%
0.00034
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-190