FFmpeg up to 4.3 libavcodec buffer overflow

entryeditHistoryDiffjsonxmlCTI

A vulnerability has been found in FFmpeg up to 4.3 (Multimedia Processing Software) and classified as critical. Affected by this vulnerability is some unknown functionality of the component libavcodec. Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.videolan.org.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

IDCommitedUserFieldChangeRemarksModeratedReasonC
1111783704/08/2021VulD...price_0day$0-$5ksee documentation04/08/2021accepted90
1111783604/08/2021VulD...cvss3_meta_tempscore6.3see documentation04/08/2021accepted90
1111783504/08/2021VulD...cvss3_meta_basescore6.3see documentation04/08/2021accepted90
1111783404/08/2021VulD...cvss3_vuldb_tempscore6.304/08/2021accepted90
1111783304/08/2021VulD...cvss3_vuldb_basescore6.304/08/2021accepted90
1111783204/08/2021VulD...cvss2_vuldb_tempscore7.504/08/2021accepted90
1111783104/08/2021VulD...cvss2_vuldb_basescore7.504/08/2021accepted90
1111783004/08/2021VulD...cvss3_vuldb_rcXderived from historical data04/08/2021accepted80
1111782904/08/2021VulD...cvss3_vuldb_rlXderived from historical data04/08/2021accepted80
1111782804/08/2021VulD...cvss3_vuldb_eXderived from historical data04/08/2021accepted80
1111782704/08/2021VulD...cvss2_vuldb_rcNDderived from historical data04/08/2021accepted80
1111782604/08/2021VulD...cvss2_vuldb_rlNDderived from historical data04/08/2021accepted80
1111782504/08/2021VulD...cvss2_vuldb_eNDderived from historical data04/08/2021accepted80
1111782404/08/2021VulD...cvss2_vuldb_aiPderived from vuldb v3 vector04/08/2021accepted80
1111782304/08/2021VulD...cvss2_vuldb_iiPderived from vuldb v3 vector04/08/2021accepted80
1111782204/08/2021VulD...cvss2_vuldb_ciPderived from vuldb v3 vector04/08/2021accepted80
1111782104/08/2021VulD...cvss2_vuldb_auNderived from vuldb v3 vector04/08/2021accepted80
1111782004/08/2021VulD...cvss2_vuldb_acLderived from vuldb v3 vector04/08/2021accepted80
1111781904/08/2021VulD...cvss2_vuldb_avNderived from vuldb v3 vector04/08/2021accepted80
1111781804/08/2021VulD...typeMultimedia Processing Software04/08/2021accepted90

Interested in the pricing of exploits?

See the underground prices here!