CVE-2021-38114

Description

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.

Reserved 2021-08-04 | Published 2021-08-04 | Updated 2024-08-04 | Assigner mitre

References

github.com/...ommit/7150f9575671f898382c370acae35f9087a30ba1

patchwork.ffmpeg.org/...P193MB1262.EURP193.PROD.OUTLOOK.COM/

lists.debian.org/debian-lts-announce/2021/08/msg00018.html ([debian-lts-announce] 20210815 [SECURITY] [DLA 2742-1] ffmpeg security update) mailing-list

www.debian.org/security/2021/dsa-4990 (DSA-4990) vendor-advisory

www.debian.org/security/2021/dsa-4998 (DSA-4998) vendor-advisory

cve.org (CVE-2021-38114)

nvd.nist.gov (CVE-2021-38114)

Download JSON