tocsin

Debian/ffmpeg: unknown

The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of service (out-of-bounds a

Action: Upgrade ffmpeg to 7:2.8.2-1 or later.

Affected

introducedfixedlast affected
07:2.8.2-1-

Fixed versions

7:2.8.2-1

Sources

published · modified · JSON