FFmpeg tty multiplexer Information Disclosure

The vulnerability of the tty demultiplexer in the FFmpeg multimedia library is related to the absence of a function named ‘readprobe’ that is intended for the tty demultiplexer. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created...

PT-2020-6487 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: ffmpeg versions prior to 4.3 Description: The issue is related to the tty demuxer in the FFmpeg library, which did not have a read probe function assigned to it. This can be exploited by crafting a legitimate "ffconcat" file that references a...