Lucene search
MitreCVELIST:CVE-2022-48434HistoryMar 29, 2023 - 12:00 a.m.
CVE-2022-48434
2023-03-2900:00:00
mitre
www.cve.org
ffmpeg
libavcodec
pthread_frame.c
vlc
use-after-free
arbitrary code
hardware re-initialization
direct3d11
cve-2022-48434
libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).
References
git.ffmpeg.org/gitweb/ffmpeg.git/commit/cc867f2c09d2b69cee8a0eccd62aff002cbbfe11
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KOMB6WRUC55VWV25IKJTV22KARBUGWGQ/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQHNSWXFUN3VJ3AO2AEJUK3BURSGM5G2/
news.ycombinator.com/item?id=35356201
security.gentoo.org/glsa/202312-14
wrv.github.io/h26forge.pdf
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2108-1)
2023-05-08 00:00:00
Fedora: Security Advisory for ffmpeg (FEDORA-2023-32c3bbbbc9)
2023-04-14 00:00:00
Fedora: Security Advisory for ffmpeg (FEDORA-2023-1e24db98a6)
2023-04-23 00:00:00
veracode
veracode
Use After Free
2023-04-30 13:12:32
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 : This update has recommended fixes for ffmpeg-4 (SUSE-SU-2023:2087-1)
2023-05-03 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ffmpeg (SUSE-SU-2023:2108-1)
2023-05-06 00:00:00
Fedora 37 : ffmpeg (2023-32c3bbbbc9)
2023-04-13 00:00:00
osv
osv
CVE-2022-48434
2023-03-29 17:15:07
ffmpeg regression
2023-11-15 09:38:15
ffmpeg vulnerabilities
2023-10-24 10:26:27
nvd
nvd
CVE-2022-48434
2023-03-29 17:15:07
fedora
fedora
[SECURITY] Fedora 37 Update: ffmpeg-5.1.3-1.fc37
2023-04-13 01:53:48
[SECURITY] Fedora 36 Update: ffmpeg-5.0.3-1.fc36
2023-04-22 01:12:24
ubuntucve
ubuntucve
CVE-2022-48434
2023-03-29 00:00:00
prion
prion
Design/Logic Flaw
2023-03-29 17:15:00
redos
redos
ROS-20230616-02
2023-06-16 00:00:00
cve
cve
CVE-2022-48434
2023-03-29 17:15:07
debiancve
debiancve
CVE-2022-48434
2023-03-29 17:15:07
rosalinux
rosalinux
Advisory ROSA-SA-2023-2277
2023-10-22 06:34:44
gentoo
gentoo
FFmpeg: Multiple Vulnerabilities
2023-12-23 00:00:00
ubuntu
ubuntu
FFmpeg vulnerabilities
2023-10-24 00:00:00
FFmpeg regression
2023-11-15 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00