UpHeron
All vulnerabilities

Servers and applications

CVE-2022-3964

A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. It is possible to initiate the attack remotely. The name of the patch is 92f9b28ed84a77138105475beba16c146bdaf984. It is recommended to apply a patch to…

Severity
High 8.1
Published
13 Nov 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
4.4.4, 5.0.3, 5.1.3
Sources
NVD

Affected software

SoftwareAffected versions
FFmpegServers and applications · cpe:a:ffmpeg:ffmpeg
  • From 4.4 before 4.4.4
  • From 5.0 before 5.0.3
  • From 5.1 before 5.1.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-3964
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-3964