Alpine/ffmpeg4: high 8.8

dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly checked.

Action: Upgrade ffmpeg4 to 4.4-r1 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2021-33815#Alpine:v3.18/ffmpeg4
• https://security.alpinelinux.org/vuln/CVE-2021-33815

published 2021-06-03T17:15:15.073Z · modified 2026-11-03T06:32:34.181069767Z · JSON