Description
A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. The attack can be initiated remotely. The name of the patch is 13c13109759090b7f7182480d075e13b36ed8edd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213544.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| unspecified | ffmpeg | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2022-43297 | A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. The attack can be initiated remotely. The name of the patch is 13c13109759090b7f7182480d075e13b36ed8edd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213544. |
 Ubuntu USN |
USN-5958-1 | FFmpeg vulnerabilities |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2024-08-03T01:27:53.975Z
Reserved: 2022-11-13T00:00:00.000Z
Link: CVE-2022-3965
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-11-13T08:15:15.367
Modified: 2024-11-21T07:20:37.927
Link: CVE-2022-3965
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses