CVE-2019-17542
14.10.2019, 02:15
FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ffmpeg | ffmpeg | 𝑥 < 2.8.16 |
| ffmpeg | ffmpeg | 3.2 ≤ 𝑥 < 3.2.15 |
| ffmpeg | ffmpeg | 3.4 ≤ 𝑥 < 3.4.7 |
| ffmpeg | ffmpeg | 4.0 ≤ 𝑥 < 4.0.5 |
| ffmpeg | ffmpeg | 4.1 ≤ 𝑥 < 4.1.5 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 20.04 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References