PT-2021-21948 · FFmpeg · Ffmpeg

Published 2021-09-20 · Updated 2021-09-27 · CVE-2021-38089

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1

Description: A Buffer Overflow issue in the config input function within libavfilter/vf bm3d.c allows attackers to cause a Denial of Service or other unspecified impacts.

Recommendations: For Ffmpeg version 4.2.1, consider disabling the config input function in libavfilter/vf bm3d.c as a temporary workaround until a patch is available.

Exploit

Related Identifiers

CVE-2021-38089

Affected Products

Ffmpeg

References · 7

• 🔥 https://trac.ffmpeg.org/ticket/8262 · Exploit
• https://ubuntu.com/security/CVE-2021-38089 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-38089 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-38089 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38089 · Security Note
• https://t.me/cvenotify/21347 · Telegram Post
• https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/0749082eb93ea02fa4b770da86597450cec84054 · Note