CVE-2021-38114 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Assigner	mitre
Reserved	2021-08-04
Published	2021-08-04
Updated	2024-08-04

Description

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.

References

https://github.com/FFmpeg/FFmpeg/commit/7150f9575671f898382c370acae35f9087a30ba1

https://patchwork.ffmpeg.org/project/ffmpeg/patch/PAXP193MB12624C21AE412BE95BA4D4A4B6F09%40PAXP193MB1262.EURP193.PROD.OUTLOOK.COM/

https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html ([debian-lts-announce] 20210815 [SECURITY] [DLA 2742-1] ffmpeg security update) mailing-list

https://www.debian.org/security/2021/dsa-4990 (DSA-4990) vendor-advisory

https://www.debian.org/security/2021/dsa-4998 (DSA-4998) vendor-advisory

cve.org CVE-2021-38114

nvd.nist.gov CVE-2021-38114

Download JSON

https://cve.threatint.com/CVE/CVE-2021-38114

Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.