PT-2022-13915 · FFmpeg+4 · Ffmpeg+4

Guilherme De Almeida Suckevicz · Published 2022-04-25 · Updated 2025-07-17 · CVE-2022-1475

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.4.2 FFmpeg versions prior to 5.0.1

Description An integer overflow issue was discovered in the g729 parse() function located in libavcodec/g729 parser.c when handling a specially crafted file. This issue can be triggered when processing such a file.

Recommendations For versions prior to 4.4.2, update to version 4.4.2 or later. For versions prior to 5.0.1, update to version 5.0.1 or later. As a temporary workaround, consider avoiding the use of the g729 parse() function until a patch is available.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2022-2133

ALT-PU-2022-2159

CVE-2022-1475

DSA-5124-1

OESA-2024-1873

OESA-2024-1875

OESA-2024-1876

OESA-2024-1877

OPENSUSE-SU-2025:15215-1

OPENSUSE-SU-2026:20710-1

SUSE-SU-2025:02352-1

SUSE-SU-2025_02352-1

USN-5472-1

Affected Products

Alt Linux

Ffmpeg

Linuxmint

Suse

Ubuntu

References · 72

• 🔥 https://trac.ffmpeg.org/ticket/9651 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-1475 · Security Note
• https://ubuntu.com/security/CVE-2020-22031 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-1475 · Vendor Advisory
• https://security.gentoo.org/glsa/202312-14 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22021 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15215-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-21688 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22019 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22028 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22027 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-20445 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-32230 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2076764 · Patch