Lucene search

PRIOn knowledge basePRION:CVE-2022-3964

HistoryNov 13, 2022 - 8:15 a.m.

Type confusion

2022-11-1308:15:00

PRIOn knowledge base

www.prio-n.com

ffmpeg

quicktime rpza

type confusion

out-of-bounds read

remote attack

patch

vdb-213543

0.002 Low

EPSS

Percentile

57.4%

JSON

A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. It is possible to initiate the attack remotely. The name of the patch is 92f9b28ed84a77138105475beba16c146bdaf984. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213543.

CPENameOperatorVersion
ffmpegge5.1
ffmpeglt5.1.3
ffmpegge5.0
ffmpeglt5.0.3
ffmpegge4.4
ffmpeglt4.4.4

Name	Operator	Version
ffmpeg	ge	5.1
ffmpeg	lt	5.1.3
ffmpeg	ge	5.0
ffmpeg	lt	5.0.3
ffmpeg	ge	4.4
ffmpeg	lt	4.4.4

References

git.ffmpeg.org/gitweb/ffmpeg.git/commit/92f9b28ed84a77138105475beba16c146bdaf984

security.gentoo.org/glsa/202312-14

vuldb.com/?id.213543

0.002 Low

EPSS

Percentile

57.4%

JSON

Related for PRION:CVE-2022-3964