adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a necessary step because the second argument to init_get_bits can be crafted.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | ffmpeg | <Â 7:4.4.1-1 | ffmpeg_7:4.4.1-1_all.deb |
Debian | 11 | all | ffmpeg | <Â 7:4.3.3-0+deb11u1 | ffmpeg_7:4.3.3-0+deb11u1_all.deb |
Debian | 10 | all | ffmpeg | <Â 7:4.1.8-0+deb10u1 | ffmpeg_7:4.1.8-0+deb10u1_all.deb |
Debian | 999 | all | ffmpeg | <Â 7:4.4.1-1 | ffmpeg_7:4.4.1-1_all.deb |
Debian | 13 | all | ffmpeg | <Â 7:4.4.1-1 | ffmpeg_7:4.4.1-1_all.deb |