FFmpeg 4.3.3

CPE Details

FFmpeg 4.3.3
ffmpeg
ffmpeg
4.3.3
2022-07-08
12h58 +00:00
2022-07-13
18h02 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ffmpeg:ffmpeg:4.3.3:*:*:*:*:*:*:*

Informations

Vendor

ffmpeg

Product

ffmpeg

Version

4.3.3

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-7272 2024-08-08 20h24 +00:00 A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. This affects the function fill_audiodata of the file /libswresample/swresample.c. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. This issue was fixed in version 6.0 by 9903ba28c28ab18dc7b7b6fb8571cc8b5caae1a6 but a backport for 5.1 was forgotten. The exploit has been disclosed to the public and may be used. Upgrading to version 5.1.6 and 6.0 9903ba28c28ab18dc7b7b6fb8571cc8b5caae1a6 is able to address this issue. It is recommended to upgrade the affected component.
6.9
Medium
CVE-2024-22860 2024-01-26 23h00 +00:00 Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in the JPEG XL Animation decoder.
9.8
Critical
CVE-2024-22861 2024-01-26 23h00 +00:00 Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module.
7.5
High
CVE-2024-22862 2024-01-26 23h00 +00:00 Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
9.8
Critical
CVE-2023-47470 2023-11-15 23h00 +00:00 Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service (DoS) via the ref_pic_list_struct function in libavcodec/evc_ps.c
7.8
High
CVE-2023-46407 2023-10-26 22h00 +00:00 FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() function.
5.5
Medium
CVE-2022-48434 2023-03-28 22h00 +00:00 libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).
8.1
High
CVE-2022-3341 2023-01-11 23h00 +00:00 A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.
5.3
Medium
CVE-2022-3109 2022-12-15 23h00 +00:00 An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cause a null pointer dereference, impacting availability.
7.5
High
CVE-2022-1475 2022-05-01 22h00 +00:00 An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.
5.5
Medium
CVE-2020-35965 2021-01-04 00h07 +00:00 decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations.
7.5
High