CVE-2022-2566

2022-09-2300:00:00

ubuntu.com

cve-2022-2566

ffmpeg

integer overflow

remote code execution

mp4

commit vulnerability

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

0.001

Percentile

42.5%

JSON

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The
size calculation in build_open_gop_key_points() goes through all entries
in the loop and adds sc->ctts_data[i].count to
sc->sample_offsets_count. This can lead to an integer overflow resulting
in a small allocation with av_calloc(). An attacker can cause remote code
execution via a malicious mp4 file. We recommend upgrading past commit
c953baa084607dd1d84c3bfcce3cf6a87c3e6e05