Lucene search

K
redosRedosROS-20240927-01
HistorySep 27, 2024 - 12:00 a.m.

ROS-20240927-01

2024-09-2700:00:00
redos.red-soft.ru
ffmpeg
multimedia library
buffer overflow
input data size
execute arbitrary code

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

Low

Vulnerability of FFmpeg multimedia library function load_input_picture is related to buffer copying without checking input data size.
checking the size of the input data. Exploitation of the vulnerability could allow an attacker to execute
arbitrary code

Vulnerability in interpolate component (libavfilter/vf_minterpolate.c) of FFmpeg multimedia library is related to buffer copying without input data size check.
is related to buffer copying without checking input data size. Exploitation of the vulnerability could
allow an attacker to execute arbitrary code

Vulnerability of libavfilter/af_stereowiden.c file of FFmpeg multimedia library is related to buffer overflow
buffer overflow in the heap. Exploitation of the vulnerability could allow an attacker to execute arbitrary code

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64ffmpeg< 4.4.3-4UNKNOWN

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

Low