adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted.
[ { "source": "https://github.com/ffmpeg/ffmpeg/commit/9ffa49496d1aae4cbbb387aac28a9e061a6ab0a6", "target": { "file": "libavformat/adtsenc.c" }, "signature_type": "Line", "deprecated": false, "id": "CVE-2021-38171-e3cbe9ce", "signature_version": "v1", "digest": { "line_hashes": [ "340113475355395989559555410026913520501", "137990287974201680121919945555266282413", "104727278381930846197606427839919055206", "306440550592068726656414586700004213449", "111695304590519358973522263762808409562" ], "threshold": 0.9 } }, { "source": "https://github.com/ffmpeg/ffmpeg/commit/9ffa49496d1aae4cbbb387aac28a9e061a6ab0a6", "target": { "function": "adts_decode_extradata", "file": "libavformat/adtsenc.c" }, "signature_type": "Function", "deprecated": false, "id": "CVE-2021-38171-e6f862de", "signature_version": "v1", "digest": { "function_hash": "220551853458764014735923732241586144836", "length": 1445.0 } } ]