p PatchFirst

CVE-2022-3965

CVE-2022-3965 · ffmpeg QuickTime Graphics Video Encoder smcenc.c smc_encode_stream out-of-bounds

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. The attack can be initiated remotely. The name of the patch is 13c13109759090b7f7182480d075e13b36ed8edd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213544.

CVSS 4.3 · Medium · EPSS 1.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • ffmpeg

    Versions
    • n/a: Affected

    No fix published

  • ffmpeg Debian:12

    Affected ranges
    • ECOSYSTEM: < 7:5.1.3-1

    Update to 7:5.1.3-1

  • ffmpeg Debian:13

    Affected ranges
    • ECOSYSTEM: < 7:5.1.3-1

    Update to 7:5.1.3-1

  • ffmpeg Debian:14

    Affected ranges
    • ECOSYSTEM: < 7:5.1.3-1

    Update to 7:5.1.3-1

Original sources

Check your server →