CVE-2021-38092

Name of the Vulnerable Software and Affected Versions Ffmpeg version 4.2.1

Description The issue is related to an integer overflow vulnerability in the filter prewitt function located in the libavfilter/vf convolution.c file. This vulnerability can be exploited by attackers to cause a Denial of Service or other unspecified impacts. It may also allow remote attackers to access confidential data, compromise data integrity, and cause a service disruption.

Recommendations For Ffmpeg version 4.2.1, consider disabling the filter prewitt function in the libavfilter/vf convolution.c file as a temporary workaround to minimize the risk of exploitation until a patch is available. Restrict access to the libavfilter/vf convolution.c module to reduce the risk of service disruption. Avoid using the filter prewitt function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.