ALPINE-CVE-2022-3965

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2022-3965
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3965.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2022-3965
Upstream
Published
2022-11-13T08:15:15Z
Modified
2026-11-03T07:31:26Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. The attack can be initiated remotely. The name of the patch is 13c13109759090b7f7182480d075e13b36ed8edd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213544.

References

Affected packages

Alpine:v3.17
ffmpeg

Package

Name
ffmpeg
Purl
pkg:apk/alpine/ffmpeg?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.0
Fixed
5.1.2-r2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3965.json"
Alpine:v3.18
ffmpeg

Package

Name
ffmpeg
Purl
pkg:apk/alpine/ffmpeg?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.0
Fixed
6.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3965.json"
Alpine:v3.19
ffmpeg

Package

Name
ffmpeg
Purl
pkg:apk/alpine/ffmpeg?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.0
Fixed
6.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3965.json"
Alpine:v3.20
ffmpeg

Package

Name
ffmpeg
Purl
pkg:apk/alpine/ffmpeg?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.0
Fixed
6.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3965.json"
Alpine:v3.21
ffmpeg

Package

Name
ffmpeg
Purl
pkg:apk/alpine/ffmpeg?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.0
Fixed
6.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3965.json"
Alpine:v3.22
ffmpeg

Package

Name
ffmpeg
Purl
pkg:apk/alpine/ffmpeg?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.0
Fixed
6.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3965.json"
Alpine:v3.23
ffmpeg

Package

Name
ffmpeg
Purl
pkg:apk/alpine/ffmpeg?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.0
Fixed
6.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3965.json"
Alpine:v3.24
ffmpeg

Package

Name
ffmpeg
Purl
pkg:apk/alpine/ffmpeg?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.0
Fixed
6.0-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3965.json"