Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.5
CVSSv3

CVE-2021-38114

Published: 04/08/2021 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 384
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Ffmpeg

Vulnerability Summary

It exists that FFmpeg incorrectly handled file conversion to APNG format. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-21041)

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ffmpeg ffmpeg 4.4

debian debian linux 9.0

debian debian linux 10.0

debian debian linux 11.0

Vendor Advisories

Ubuntu Security Notice: USN-5472-1: FFmpeg vulnerabilities
Several security issues were fixed in FFmpeg ...
Debian Security Advisories: DSA-4990-1 ffmpeg -- security update
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed For the oldstable distribution (buster), these problems have been fixed in version 7:418-0+deb10u1 We recommend that you upgrade your ffm ...
Debian Security Advisories: DSA-4998-1 ffmpeg -- security update
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed For the stable distribution (bullseye), these problems have been fixed in version 7:433-0+deb11u1 We recommend that you upgrade your ffmp ...
Arch Linux Issues:
libavcodec/dnxhddecc in FFmpeg 44 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868 ...

Github Repositories

https://github.com/me22bee/me22bee

Hi there 👋 🔭 I was working on an static analysis tool for vulnerability detection in softwares as my thesis 🌱 I’m currently learning and working on kubernetes security and web penetration testing ⚡ Open Source Contribution Github/Gitlab? FFmpeg (githubcom/FFmpeg/FFmpeg/commit/7150f9575671f898382c370acae35f9087a30ba1)(patch) FFmpeg (github

https://github.com/meweez/meweez

Hi there 👋 🔭 I was working on an static analysis tool for vulnerability detection in softwares as my thesis 🌱 I’m currently learning and working on kubernetes security and web penetration testing ⚡ Open Source Contribution Github/Gitlab? FFmpeg (githubcom/FFmpeg/FFmpeg/commit/7150f9575671f898382c370acae35f9087a30ba1)(patch) FFmpeg (github

References

CWE-252https://github.com/FFmpeg/FFmpeg/commit/7150f9575671f898382c370acae35f9087a30ba1https://lists.debian.org/debian-lts-announce/2021/08/msg00018.htmlhttps://www.debian.org/security/2021/dsa-4990https://www.debian.org/security/2021/dsa-4998https://patchwork.ffmpeg.org/project/ffmpeg/patch/PAXP193MB12624C21AE412BE95BA4D4A4B6F09%40PAXP193MB1262.EURP193.PROD.OUTLOOK.COM/https://ubuntu.com/security/notices/USN-5472-1https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook