9.8
CVSSv3

CVE-2019-12730

Published: 04/06/2019 Updated: 24/08/2020
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

aa_read_header in libavformat/aadec.c in FFmpeg prior to 3.2.14 and 4.x prior to 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ffmpeg ffmpeg

Vendor Advisories

Debian Bug report logs - #932469 ffmpeg: CVE-2019-12730 Package: src:ffmpeg; Maintainer for src:ffmpeg is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 19 Jul 2019 19:45:02 UTC Severity: important Tags: fixed-upstream, security, up ...
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed For the stable distribution (buster), this problem has been fixed in version 7:414-1~deb10u1 We recommend that you upgrade your ffmpeg pa ...

Github Repositories

Multimedia Communication

FFmpegSecurity Multimedia Communication 1 CVE-2019-12730

Scan the vulnerability of Docker images stored in ECR

ECRanner This is that scan the vulnerability of Docker images stored in ECR Table of contents Feature Get Started Install Prerequirements Install ECRanner Write ecranneryml Execute Command options Configuration Parameter v10 Feature Pull Docker Image From ECR Support multi account Vulnerability Scan Trivy detects software (OS package and application library) vul