CVE-2022-1475
CVE-2022-1475
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.
CVSS 5.5 · Medium · EPSS 0.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
ffmpeg
- Versions
- before 4.4.2: Affected
- before 5.0.1: Affected
No fix published
ffmpeg Debian:12
- Affected ranges
- ECOSYSTEM: < 7:4.4.2-1
Update to 7:4.4.2-1
ffmpeg Debian:13
- Affected ranges
- ECOSYSTEM: < 7:4.4.2-1
Update to 7:4.4.2-1
ffmpeg Debian:14
- Affected ranges
- ECOSYSTEM: < 7:4.4.2-1
Update to 7:4.4.2-1
ffmpeg Ubuntu:22.04:LTS
- Versions
- 7:4.4-6ubuntu5
- 7:4.4.1-2ubuntu1
- 7:4.4.1-3ubuntu1
- 7:4.4.1-3ubuntu2
- 7:4.4.1-3ubuntu3
- 7:4.4.1-3ubuntu5
- Affected ranges
- ECOSYSTEM: < 7:4.4.2-0ubuntu0.22.04.1
Update to 7:4.4.2-0ubuntu0.22.04.1