| Package | Affected versions | Patched versions |
|---|---|---|
| ffmpeg | ≤ 3.2 |
The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service (allocation of huge memory, and being killed by the OS) via a crafted MOV file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free