CVE-2022-1475

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.4.2 FFmpeg versions prior to 5.0.1

Description An integer overflow issue was discovered in the g729 parse() function located in libavcodec/g729 parser.c when handling a specially crafted file. This issue can be triggered when processing such a file.

Recommendations For versions prior to 4.4.2, update to version 4.4.2 or later. For versions prior to 5.0.1, update to version 5.0.1 or later. As a temporary workaround, consider avoiding the use of the g729 parse() function until a patch is available.