Narpat Mali c867f67bdb ffmpeg: fix for CVE-2022-3965 ...

A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function
smc_encode_stream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. The
manipulation of the argument y_size leads to out-of-bounds read. The attack can be initiated remotely.
The name of the patch is 13c13109759090b7f7182480d075e13b36ed8edd. It is recommended to apply a patch to
fix this issue. The identifier of this vulnerability is VDB-213544.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2022-3965

Upstream Fix:
13c1310975

(From OE-Core rev: b88c96fe8964614978aa25a65dd34fc3c05c664c)

Signed-off-by: Narpat Mali <narpat.mali@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2022-11-27 23:54:50 +00:00

..

ffmpeg

ffmpeg: fix for CVE-2022-3965

2022-11-27 23:54:50 +00:00

ffmpeg_5.1.2.bb

ffmpeg: fix for CVE-2022-3965

2022-11-27 23:54:50 +00:00