Description
FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution.
References
https://security.gentoo.org/glsa/202105-24
Third Party Advisory
https://trac.ffmpeg.org/ticket/8845
ExploitVendor Advisory
https://trac.ffmpeg.org/ticket/8863
ExploitVendor Advisory
https://security.gentoo.org/glsa/202105-24
Third Party Advisory
https://trac.ffmpeg.org/ticket/8845
ExploitVendor Advisory
https://trac.ffmpeg.org/ticket/8863
ExploitVendor Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.8 · High
Information
Source identifier
Vulnerability status
Modified
Published
2021-04-07T18:15:13.403Z
4 years agoLast modified
2024-11-21T05:03:21.060Z
1 year ago