CVE-2019-12730
aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of un...
Original description
The description as published by the source.
aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-12730 ffmpeg Fixed in: 7:4.1.4-1
References
- advisory github.com
- advisory security.gentoo.org
- advisory debian.org
- patch github.com
- web securityfocus.com
- web git.ffmpeg.org
- web git.ffmpeg.org
- web seclists.org
- web usn.ubuntu.com