CVE-2019-11338

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of servic...

Original description

The description as published by the source.

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2019-11338 ffmpeg Fixed in: 7:4.1.3-1

References

advisory lists.opensuse.org
advisory lists.debian.org
advisory seclists.org
advisory usn.ubuntu.com
advisory usn.ubuntu.com
advisory debian.org
patch github.com
patch github.com
web securityfocus.com