The ffframethreadinit function in libavcodec/pthreadframe.c in FFmpeg before 2.7.2 mishandles certain memory-allocation failures, which allows remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via a crafted file, as demonstrated by an AVI file.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "7:2.8.3-1",
"binary_name": "ffmpeg"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "ffmpeg-dbg"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "ffmpeg-dbgsym"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "ffmpeg-doc"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libav-tools"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavcodec-dev"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavcodec-extra"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavcodec-ffmpeg-extra56"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavcodec-ffmpeg-extra56-dbgsym"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavcodec-ffmpeg56"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavcodec-ffmpeg56-dbgsym"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavdevice-dev"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavdevice-ffmpeg56"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavdevice-ffmpeg56-dbgsym"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavfilter-dev"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavfilter-ffmpeg5"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavfilter-ffmpeg5-dbgsym"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavformat-dev"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavformat-ffmpeg56"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavformat-ffmpeg56-dbgsym"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavresample-dev"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavresample-ffmpeg2"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavresample-ffmpeg2-dbgsym"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavutil-dev"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavutil-ffmpeg54"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libavutil-ffmpeg54-dbgsym"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libpostproc-dev"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libpostproc-ffmpeg53"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libpostproc-ffmpeg53-dbgsym"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libswresample-dev"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libswresample-ffmpeg1"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libswresample-ffmpeg1-dbgsym"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libswscale-dev"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libswscale-ffmpeg3"
},
{
"binary_version": "7:2.8.3-1",
"binary_name": "libswscale-ffmpeg3-dbgsym"
}
]
}