| Package | Affected versions | Patched versions |
|---|---|---|
| ffmpeg | ≥ 3.2, < 3.2.15≥ 3.4, < 3.4.7≥ 4.0, < 4.0.5≥ 4.1, < 4.1.5< 2.8.16 | 3.2.153.4.74.0.54.1.52.8.16 |
FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free