CVE-2019-17539

In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer.

References

Affected packages

Git / github.com/ffmpeg/ffmpeg

Affected ranges

Type: GIT
Repo: https://github.com/ffmpeg/ffmpeg
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

8df6884832ec413cf032dfaa45c23b1c7876670c

Affected versions

Other

n0.*

n0.11-dev

n0.12-dev

n0.8

n1.*

n1.1-dev

n1.2-dev

n1.3-dev

n2.*

n2.0

n2.1-dev

n2.2-dev

n2.3-dev

n2.4-dev

n2.5-dev

n2.6-dev

n2.7-dev

n2.8-dev

n2.9-dev

n3.*

n3.1-dev

n3.2-dev

n3.3-dev

n3.4-dev

n3.5-dev

n4.*

n4.1-dev

n4.2-dev

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/ffmpeg/ffmpeg/commit/8df6884832ec413cf032dfaa45c23b1c7876670c",
        "target": {
            "function": "avcodec_open2",
            "file": "libavcodec/utils.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2019-17539-1794bf98",
        "digest": {
            "length": 17416.0,
            "function_hash": "205206128562018730369807501325477623210"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://github.com/ffmpeg/ffmpeg/commit/8df6884832ec413cf032dfaa45c23b1c7876670c",
        "target": {
            "file": "libavcodec/utils.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2019-17539-64ec3124",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "220330626061826535315657386462474702952",
                "284434091912125655641126633699664364654",
                "169031453947109328122480615508055499488",
                "274679704614273153990806559594132734773"
            ]
        },
        "signature_type": "Line"
    }
]

Git / git.ffmpeg.org/ffmpeg.git