8.1

CVE-2022-48434: ffmpeg Use After Free

CVSS: 8.1v3.1HighModified
AliasesSUSE-SU-2023:2087-1SUSE-SU-2023:2108-1UBUNTU-CVE-2022-48434
Published 29-03-2023Last modified 21-10-2024
Open JSON

Vulnerability summary

CVE-2022-48434 is a high (CVSS 8.1) Use After Free vulnerability in ffmpeg. EPSS estimates a 1.52% chance of exploitation in the next 30 days, higher than 74.2% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
43/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.1/10
010
High · v3.1 (CVE.org)
EPSS score
1.52%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 5 · Related 4
DSA-5721-1OPENSUSE-SU-2025:14880-1SUSE-SU-2023:2115-1SUSE-SU-2025:0958-1USN-6449-1

Timeline

  1. 29-03-2023
    PublishedVulnerability first disclosed.
  2. 21-10-2024
    Last modifiedVulnerability information updated.

Description

libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

1.52%

Chance of exploitation in the next 30 days

Percentile

74%

Versus all other CVEs

30-day change

+0.01 pp

From 1.51% on 18-09-2026

18-09-202618-10-2026
EPSS score
1.52%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (news.ycombinator.com)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Suse16 products
  • ffmpeg-4&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP4< 4.4-150400.3.15.1
  • ffmpeg-4&distro=SUSE Linux Enterprise Module for Package Hub 15 SP4< 4.4-150400.3.15.1
  • ffmpeg-4&distro=SUSE Linux Enterprise Workstation Extension 15 SP4< 4.4-150400.3.15.1
  • ffmpeg&distro=SUSE Enterprise Storage 7< 3.4.2-150200.11.28.1
  • ffmpeg&distro=SUSE Enterprise Storage 7.1< 3.4.2-150200.11.28.1
Chainguard4 products
  • torchaudio-ffmpeg-tarballsAll versions (No fix recorded)
  • torchaudio-ffmpeg-tarballs-4.4.4All versions (No fix recorded)
  • torchaudio-ffmpeg-tarballs-5.0.3All versions (No fix recorded)
  • torchaudio-ffmpeg-tarballs-6.0All versions (No fix recorded)
Opensuse2 products
  • ffmpeg-4&distro=openSUSE Leap 15.4< 4.4-150400.3.15.1
  • ffmpeg&distro=openSUSE Leap 15.4< 3.4.2-150200.11.28.1
Debian1 product
  • ffmpeg< 7:5.1.2-1
Ffmpeg1 product
Ubuntu1 product
  • ffmpegAll versions (No fix recorded) | < 7:3.4.11-0ubuntu0.1+esm3 | < 7:4.2.7-0ubuntu0.1+esm3 | < 7:4.4.2-0ubuntu0.22.04.1+esm2

6 vendors · 25 products

References

18 links
Show all 18 references