EUVD-2019-4817

Malware in sbrugna...

Buffer Over-read

FFmpeg is vulnerable to buffer over-read. The attack is possible because it does not support some of the pixel formats in the function blockcmp of ffmpeg/libavcodec/zmbvenc.c, causing a heap buffer overflow...

CVE-2019-13312

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

CVE-2019-13312

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

CVE-2019-13312

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

CVE-2019-13312

CVE-2019-13312 affects FFmpeg 4.1.3, where block_cmp() in libavcodec/zmbvenc.c can trigger a heap-based buffer over-read. This is evidenced across multiple advisories (ALT Linux fix 4.2.3-alt1 and Gentoo GLSA 202003-65 recommending upgrading to FFmpeg 4.2.x or newer). Impact per sources is partia...