PT-2023-30005 · FFmpeg · Ffmpeg
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
FFmpeg versions prior to commit bf814
Description
The issue is related to an out of bounds read via the
dist->alphabet size variable in the read vlc prefix() function.Recommendations
For versions prior to commit bf814, consider applying a patch that fixes the out of bounds read issue in the
read vlc prefix() function.
As a temporary workaround, consider restricting access to the read vlc prefix() function until a patch is available.Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ffmpeg