| Package | Affected versions | Patched versions |
|---|---|---|
| libav | ≥ 10.0, < 10.2≥ 9.0, < 9.14< 0.8.13 | 10.29.140.8.13 |
Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free