Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c655-qv2v-73rm

Опубликовано: 29 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

EPSS

Процентиль: 6%
0.00027
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 5.5
ubuntu
7 месяцев назад

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

CVSS3: 5.5
nvd
7 месяцев назад

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

CVSS3: 5.5
debian
7 месяцев назад

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c m ...

CVSS3: 6.2
fstec
7 месяцев назад

Уязвимость модуля avcodec/speexdec.c мультимедийной библиотеки Ffmpeg, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 9.8
redos
около 2 месяцев назад

Множественные уязвимости ffmpeg

EPSS

Процентиль: 6%
0.00027
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-190