Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-60144
HistoryJul 13, 2022 - 12:00 a.m.

FFmpeg rpza_decode_stream() code execution vulnerability

2022-07-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.001 Low

EPSS

Percentile

24.4%

FFmpeg is a complete solution from the Ffmpeg team to record, convert, and stream audio and video. A code execution vulnerability exists in FFmpeg rpza_decode_stream(), which can be exploited to trigger an out-of-bounds read memory access and execute arbitrary code on the system.

CPENameOperatorVersion
ffmpeg ffmpegeq2.0

0.001 Low

EPSS

Percentile

24.4%