CVE-2022-2566
Published: Sep 23, 2022
Modified: Apr 21, 2025
CVSS v3.1
9.0
Description
A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries in the loop and adds `sc->ctts_data[i].count` to `sc->sample_offsets_count`. This can lead to an integer overflow resulting in a small allocation with `av_calloc()`. An attacker can cause remote code execution via a malicious mp4 file. We recommend upgrading past commit c953baa084607dd1d84c3bfcce3cf6a87c3e6e05
| Vendor | Product | Versions |
|---|---|---|
FFMPEG | FFMPEG | affected 5.1 - < unspecifiedaffected ab77b878f1205225c6de1370fb0e998dbcc8bc69 - < unspecifiedaffected unspecified - < c953baa084607dd1d84c3bfcce3cf6a87c3e6e05 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now