PT-2021-18614 · FFmpeg+1 · Ffmpeg+1

Published 2021-04-07 · Updated 2026-02-06 · CVE-2021-30123

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.3

Description The issue is related to a buffer overflow in libavcodec, which can be triggered by a crafted file. This may lead to remote code execution.

Recommendations For versions prior to 4.3, update to a version that contains a fix for this issue to prevent potential remote code execution.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALT-PU-2021-3166

ALT-PU-2022-1821

CLEANSTART-2026-EZ98723

CLEANSTART-2026-PS82605

CLEANSTART-2026-XE32069

CVE-2021-30123

Affected Products

Alt Linux

Ffmpeg

References · 130

• 🔥 https://trac.ffmpeg.org/ticket/8863 · Exploit
• 🔥 https://trac.ffmpeg.org/ticket/8845 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-30123 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-24020 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-1999014 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-20450 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-10001 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-7757 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-12284 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-38291 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-13300 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-9721 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-38171 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-22038 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-17539 · Security Note