Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-70582
HistorySep 28, 2022 - 12:00 a.m.

FFmpeg Buffer Overflow Vulnerability (CNVD-2022-70582)

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
ffmpeg
buffer overflow
build_open_gop_key_points
integer overflow
vulnerability
audio
video
conversion

0.001 Low

EPSS

Percentile

41.6%

FFmpeg is software developed by individual developers that performs recording, conversion, and streaming functions for multiple formats of audio and video. a buffer overflow vulnerability exists in FFmpeg, where the size calculation in build_open_gop_key_points() iterates over all entries in the loop and adds sc->ctts_data[i].count added to sc->sample_offsets_count, which could lead to an integer overflow. An attacker could exploit this vulnerability to cause a buffer overflow.

CPENameOperatorVersion
ffmpeg ffmpegeq5.1

0.001 Low

EPSS

Percentile

41.6%