Описание
In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly unspecified other impact.
Ссылки
- Third Party AdvisoryVDB Entry
- Patch
- Third Party Advisory
- Third Party AdvisoryVDB Entry
- Patch
- Third Party Advisory
Уязвимые конфигурации
EPSS
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
Связанные уязвимости
In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly unspecified other impact.
In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRA ...
In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly unspecified other impact.
Уязвимость функции handle_eac3 фреймворка для работы с мультимедиа форматами FFmpeg, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
EPSS
8.8 High
CVSS3
6.8 Medium
CVSS2