| Package | Affected versions | Patched versions |
|---|---|---|
| ffmpeg | < 3.2.14 | 3.2.14 |
aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free