CVE-2019-15942

Name of the Vulnerable Software and Affected Versions FFmpeg versions through 4.2

Description The issue is related to a "Conditional jump or move depends on uninitialised value" problem in the h2645 parse function. This is caused by the alloc rbsp buffer function in libavcodec/h2645 parse.c mishandling the rbsp buffer.

Recommendations For FFmpeg versions through 4.2, consider updating to a version that fixes the issue in the h2645 parse function, specifically how alloc rbsp buffer handles rbsp buffer, to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.