Debian/ffmpeg: critical 9.8
The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because of incorrect buffer padding for non-Haar wavelets, related to
Action: Upgrade ffmpeg to 7:3.4.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7:3.4.1-1 | - |
Fixed versions
| 7:3.4.1-1 |
Sources
- osv: DEBIAN-CVE-2017-16840#Debian:14/ffmpeg
- https://security-tracker.debian.org/tracker/CVE-2017-16840
published · modified · JSON