CVE-2019-11339

    Dashboard / Vulnerabilities / CVE-2019-11339

    CVE-2019-11339

    Published: 19 Apr 2019Last Modified: 17 Aug 2026

    Summary:

    Details: The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via crafted MPEG-4 video data.

    References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html, https://usn.ubuntu.com/3967-1/, http://www.securityfocus.com/bid/108037, https://github.com/FFmpeg/FFmpeg/commit/1f686d023b95219db933394a7704ad9aa5f01cbb, https://github.com/FFmpeg/FFmpeg/commit/d227ed5d598340e719eff7156b1aa0a4469e9a6a

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- ace829cb45cff530b8a0aed6adf18f329d7a98f6
    Fixed -ee66e04bc9dbbcf95114a103f174ed54b2260758

    Affected versions

    n4.1.1
    n4.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High