Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c655-qv2v-73rm

Опубликовано: 29 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

EPSS

Процентиль: 10%
0.00036
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 1 года назад

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

CVSS3: 5.5
nvd
около 1 года назад

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

CVSS3: 5.5
debian
около 1 года назад

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c m ...

CVSS3: 6.2
fstec
около 1 года назад

Уязвимость модуля avcodec/speexdec.c мультимедийной библиотеки Ffmpeg, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 9.8
redos
8 месяцев назад

Множественные уязвимости ffmpeg

EPSS

Процентиль: 10%
0.00036
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-190