FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | ffmpeg | <= 7:5.1.5-0+deb12u1 | ffmpeg_7:5.1.5-0+deb12u1_all.deb |
Debian | 11 | all | ffmpeg | <= 7:4.3.6-0+deb11u1 | ffmpeg_7:4.3.6-0+deb11u1_all.deb |
Debian | 999 | all | ffmpeg | <= 7:6.1.1-4 | ffmpeg_7:6.1.1-4_all.deb |
Debian | 13 | all | ffmpeg | <= 7:6.1.1-4 | ffmpeg_7:6.1.1-4_all.deb |