PT-2019-6448 · FFmpeg+5 · Ffmpeg+5

Publicado

2019-10-13

·

Atualizado

2024-04-29

·

CVE-2021-38094

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2.1
Description The issue is related to an Integer Overflow vulnerability in the filter sobel function within the libavfilter/vf convolution.c component of the FFmpeg library. This vulnerability can be exploited by attackers to cause a Denial of Service or potentially gain access to confidential data, compromise data integrity, and disrupt service.
Recommendations For FFmpeg version 4.2.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2020-1014
ALT-PU-2020-2032
BDU:2024-09035
CVE-2021-38094
OPENSUSE-SU-2021:3521-1
OPENSUSE-SU-2021_3521-1
OPENSUSE-SU-2024_1468-1
SUSE-SU-2021:3521-1
SUSE-SU-2023:0005-1
SUSE-SU-2024:1468-1
USN-6449-1
USN-6449-2

Produtos afetados

Alt Linux
Astra Linux
Ffmpeg
Linuxmint
Suse
Ubuntu