| Package | Affected versions | Patched versions |
|---|---|---|
| ffmpeg | ≥ 4.0, < 4.0.4≥ 4.1, < 4.1.2 | 4.0.44.1.2 |
The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via crafted MPEG-4 video data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free