A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. It is possible to initiate the attack remotely. The name of the patch is 92f9b28ed84a77138105475beba16c146bdaf984. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213543.
References
| Link | Resource |
|---|---|
| https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/92f9b28ed84a77138105475beba16c146bdaf984 | Patch Third Party Advisory |
| https://security.gentoo.org/glsa/202312-14 | |
| https://vuldb.com/?id.213543 | Third Party Advisory |
| https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/92f9b28ed84a77138105475beba16c146bdaf984 | Patch Third Party Advisory |
| https://security.gentoo.org/glsa/202312-14 | |
| https://vuldb.com/?id.213543 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:20
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| References | () https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/92f9b28ed84a77138105475beba16c146bdaf984 - Patch, Third Party Advisory | |
| References | () https://security.gentoo.org/glsa/202312-14 - | |
| References | () https://vuldb.com/?id.213543 - Third Party Advisory |
23 Dec 2023, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Nov 2023, 03:52
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
Information
Published : 2022-11-13 08:15
Updated : 2024-11-21 07:20
NVD link : CVE-2022-3964
Mitre link : CVE-2022-3964
CVE.ORG link : CVE-2022-3964
JSON object : View
Products Affected
ffmpeg
- ffmpeg
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer