Description (CNA)
A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / FFmpeg | affected 3.4.0; affected 3.4.1; affected 3.4.2; affected 3.4.3; affected 3.4.4; affected 3.4.5; affected 3.4.6; affected 3.4.7; affected 3.4.8; affected 3.4.9; affected 3.4.10; affected 3.4.11; affected 3.4.12; affected 3.4.13; affected 4.2.0; affected 4.2.1; affected 4.2.2; affected 4.2.3; affected 4.2.4; affected 4.2.5; affected 4.2.6; affected 4.2.7; affected 4.2.8; affected 4.2.9; affected 4.2.10; affected 4.3.0; affected 4.3.1; affected 4.3.2; affected 4.3.3; affected 4.3.4; affected 4.3.5; affected 4.3.6; affected 4.3.7; affected 4.3.8; affected 4.4.0; affected 4.4.1; affected 4.4.2; affected 4.4.3; affected 4.4.4; affected 4.4.5; affected 5.1.0; affected 5.1.1; affected 5.1.2; affected 5.1.3; affected 5.1.4; affected 5.1.5; affected 5.1.6; affected 6.1.0; affected 6.1.1; affected 6.1.2; affected 7.0; affected 7.0.0; affected 7.0.1; affected 7.0.2; affected 7.1 |
CWE
CWE-121, CWE-119
References
- https://vuldb.com/?id.296589
- https://vuldb.com/?ctiid.296589
- https://vuldb.com/?submit.496929
- https://trac.ffmpeg.org/ticket/11418#comment:3
- https://trac.ffmpeg.org/attachment/ticket/11418/poc
- https://ffmpeg.org/
ADP enrichment
No English description supplied.
No references supplied.