A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. It is possible to initiate the attack remotely. The name of the patch is 92f9b28ed84a77138105475beba16c146bdaf984. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213543.
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "ffmpeg" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "ffmpeg-dbgsym" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "ffmpeg-doc" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavcodec-dev" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavcodec-extra" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavcodec-extra58" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavcodec-extra58-dbgsym" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavcodec58" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavcodec58-dbgsym" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavdevice-dev" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavdevice58" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavdevice58-dbgsym" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavfilter-dev" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavfilter-extra" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavfilter-extra7" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavfilter-extra7-dbgsym" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavfilter7" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavfilter7-dbgsym" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavformat-dev" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavformat-extra" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavformat-extra58" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavformat-extra58-dbgsym" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavformat58" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavformat58-dbgsym" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavutil-dev" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavutil56" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libavutil56-dbgsym" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libpostproc-dev" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libpostproc55" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libpostproc55-dbgsym" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libswresample-dev" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libswresample3" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libswresample3-dbgsym" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libswscale-dev" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libswscale5" }, { "binary_version": "7:4.4.2-0ubuntu0.22.04.1+esm1", "binary_name": "libswscale5-dbgsym" } ] }