FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Alpine | edge-community | noarch | ffmpeg | <Â 4.3-r0 | UNKNOWN |
Alpine | edge-community | noarch | ffmpeg4 | <Â 4.3-r0 | UNKNOWN |
Alpine | 3.10-community | noarch | ffmpeg | <Â 4.1.6-r0 | UNKNOWN |
Alpine | 3.11-community | noarch | ffmpeg | <Â 4.2.4-r0 | UNKNOWN |
Alpine | 3.12-community | noarch | ffmpeg | <Â 4.3-r0 | UNKNOWN |
Alpine | 3.13-community | noarch | ffmpeg | <Â 4.3-r0 | UNKNOWN |
Alpine | 3.14-community | noarch | ffmpeg | <Â 4.3-r0 | UNKNOWN |
Alpine | 3.15-community | noarch | ffmpeg | <Â 4.3-r0 | UNKNOWN |
Alpine | 3.16-community | noarch | ffmpeg | <Â 4.3-r0 | UNKNOWN |
Alpine | 3.16-community | noarch | ffmpeg4 | <Â 4.3-r0 | UNKNOWN |