Описание
A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
A flaw was found in FFmpeg. A remote attacker could exploit a heap buffer overflow vulnerability in the av_bprint_finalize() function by providing a specially crafted input. This could lead to a Denial of Service (DoS), making the affected system or application unavailable to legitimate users.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Lightspeed Core | openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | ffmpeg | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | redhat-user-workloads/bootc-cuda-aws-3-3 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | redhat-user-workloads/bootc-cuda-azure-3-3 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | redhat-user-workloads/bootc-cuda-gcp-3-3 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | redhat-user-workloads/bootc-rocm-azure-3-3 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-cuda-rhel9 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-rocm-rhel9 | Fix deferred | ||
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-vllm-gaudi-rhel9 | Fix deferred |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
A heap buffer overflow in the av_bprint_finalize() function of FFmpeg ...
A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Уязвимость функции av_bprint_finalize() утилиты zmqsend мультимедийной библиотеки FFmpeg, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
5.3 Medium
CVSS3