| Package | Affected versions | Patched versions |
|---|---|---|
| ffmpeg | ≤ 2.7.1 |
The ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via crafted (1) RV30 or (2) RV40 RealVideo data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free