Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:31689
HistoryAug 16, 2021 - 6:55 a.m.

Arbitrary Code Execution

2021-08-1606:55:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
ffmpeg
arbitrary code execution
vulnerability
.mov files
heap-based buffer overflow
libavcodec
host os

EPSS

0.004

Percentile

73.9%

ffmpeg is vulnerable to arbitrary code execution. A heap-based buffer overflow vulnerability in libavcodec/get_bits.h when writing .mov files allows an attacker to execute arbitrary code on the host OS.