CVE-2019-17542
Description
FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c.
Risk Information
Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.815
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| ffmpeg security update(DSA-4722-1) ffmpeg_4.1.6-1~deb10u1_i386.deb | Linux |
| ffmpeg security update(DSA-4722-1) ffmpeg_4.1.6-1~deb10u1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) ffmpeg_3.4.8-0ubuntu0.2_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) ffmpeg_3.4.8-0ubuntu0.2_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) ffmpeg_4.2.4-1ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) ffmpeg_4.2.4-1ubuntu0.1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) ffmpeg_2.8.17-0ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) ffmpeg_2.8.17-0ubuntu0.1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavutil55_3.4.8-0ubuntu0.2_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavutil55_3.4.8-0ubuntu0.2_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavutil56_4.2.4-1ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavutil56_4.2.4-1ubuntu0.1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswscale4_3.4.8-0ubuntu0.2_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswscale4_3.4.8-0ubuntu0.2_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswscale5_4.2.4-1ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswscale5_4.2.4-1ubuntu0.1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec57_3.4.8-0ubuntu0.2_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec57_3.4.8-0ubuntu0.2_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec58_4.2.4-1ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec58_4.2.4-1ubuntu0.1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter6_3.4.8-0ubuntu0.2_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter6_3.4.8-0ubuntu0.2_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter7_4.2.4-1ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter7_4.2.4-1ubuntu0.1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavdevice57_3.4.8-0ubuntu0.2_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavdevice57_3.4.8-0ubuntu0.2_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavdevice58_4.2.4-1ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavdevice58_4.2.4-1ubuntu0.1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavformat57_3.4.8-0ubuntu0.2_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavformat57_3.4.8-0ubuntu0.2_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavformat58_4.2.4-1ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavformat58_4.2.4-1ubuntu0.1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libpostproc54_3.4.8-0ubuntu0.2_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libpostproc54_3.4.8-0ubuntu0.2_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libpostproc55_4.2.4-1ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libpostproc55_4.2.4-1ubuntu0.1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavresample3_3.4.8-0ubuntu0.2_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavresample3_3.4.8-0ubuntu0.2_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavresample4_4.2.4-1ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavresample4_4.2.4-1ubuntu0.1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswresample2_3.4.8-0ubuntu0.2_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswresample2_3.4.8-0ubuntu0.2_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswresample3_4.2.4-1ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswresample3_4.2.4-1ubuntu0.1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec-extra57_3.4.8-0ubuntu0.2_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec-extra57_3.4.8-0ubuntu0.2_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec-extra58_4.2.4-1ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec-extra58_4.2.4-1ubuntu0.1_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter-extra6_3.4.8-0ubuntu0.2_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter-extra6_3.4.8-0ubuntu0.2_amd64.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter-extra7_4.2.4-1ubuntu0.1_i386.deb | Linux |
| Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter-extra7_4.2.4-1ubuntu0.1_amd64.deb | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234