tocsin

Alpine/ffmpeg: high 8.8

An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution.

Action: Upgrade ffmpeg to 8.1.2-r0 or later.

Affected

introducedfixedlast affected
08.1.2-r0-

Fixed versions

8.1.2-r0

Sources

published · modified · JSON