Description
FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution.
References
https://security.gentoo.org/glsa/202105-24
Third Party Advisory
https://trac.ffmpeg.org/ticket/8845
ExploitVendor Advisory
https://trac.ffmpeg.org/ticket/8863
ExploitVendor Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.8 · High
CVSS V3.1
CVSS V3.0
CVSS V2.0
Information
Source identifier
Vulnerability status
Modified
Published
2021-04-07T20:15:13.403
4 years agoLast modified
2023-11-07T03:32:58.510
1 year ago