tocsin

Debian/ffmpeg: medium 6.5

A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, which could let a remote malicious user cause a Denial of Service.

Action: Upgrade ffmpeg to 7:4.3.2-0+deb11u2 or later.

Affected

introducedfixedlast affected
07:4.3.2-0+deb11u2-

Fixed versions

7:4.3.2-0+deb11u2

Sources

published · modified · JSON