Описание
FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 7.0 |
| esm-apps-legacy/xenial | released | 7:2.8.17-0ubuntu0.1+esm12 |
| esm-apps/bionic | released | 7:3.4.11-0ubuntu0.1+esm10 |
| esm-apps/focal | released | 7:4.2.7-0ubuntu0.1+esm10 |
| esm-apps/jammy | released | 7:4.4.2-0ubuntu0.22.04.1+esm9 |
| esm-apps/noble | released | 7:6.1.1-3ubuntu5+esm5 |
| esm-apps/resolute | not-affected | 7.0 |
| esm-apps/xenial | released | 7:2.8.17-0ubuntu0.1+esm12 |
| focal | ignored | end of standard support, was needed |
| jammy | needed |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | needs-triage | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| noble | DNE | |
| oracular | DNE | |
| plucky | DNE | |
| questing | DNE | |
| resolute | DNE |
Показывать по
Ссылки на источники
EPSS
9.1 Critical
CVSS3
Связанные уязвимости
FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking.
FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the par ...
FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking.
Уязвимость функции parse_options компонента sbgdec.c модуля libavformat мультимедийной библиотеки FFmpeg, позволяющая нарушителю нарушить вызвать отказ в обслуживании
EPSS
9.1 Critical
CVSS3