Description
Heap-based buffer overflow in the decode_block function in libavcodec/exr.c in FFmpeg before 3.1.3 allows remote attackers to cause a denial of service (application crash) via vectors involving tile positions.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ffmpeg | 7:3.1.3-1 | — |
| Debian 13 | ffmpeg | 7:3.1.3-1 | — |
| Debian 12 | ffmpeg | 7:3.1.3-1 | — |
References
- http://packetstormsecurity.com/files/138618/ffmpeg-3.1.2-Heap-Overflow.html
- 20160907 CVE-2016-6920 ffmpeg exr file Heap Overflow mailing-list
- 92664 vdb-entry
- http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit%3Bh=79f52a0dbd484aad111e4bf4a4f7047c7ceb6137
- 92790 vdb-entry
- https://www.ffmpeg.org/security.html