Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hj8w-74cf-p23x

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.

EPSS

Процентиль: 62%
0.00425
Низкий

8.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 7 лет назад

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.

CVSS3: 8.1
nvd
больше 7 лет назад

In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.

CVSS3: 8.1
debian
больше 7 лет назад

In FFmpeg 4.0.1, due to a missing check for negative values of the mqu ...

suse-cvrf
больше 7 лет назад

Security update for ffmpeg

suse-cvrf
около 6 лет назад

Security update for ffmpeg-4

EPSS

Процентиль: 62%
0.00425
Низкий

8.1 High

CVSS3

Дефекты

CWE-125