SUSE-SU-2019:3184-1: ffmpeg&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2019:3184-1 is a vulnerability in ffmpeg&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 05-12-2019PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for ffmpeg This update for ffmpeg fixes the following issues: Security issues fixed: - CVE-2019-17542: Fixed a heap-buffer overflow in vqa_decode_chunk due to an out-of-array access (bsc#1154064). - CVE-2019-12730: Fixed an uninitialized use of variables due to an improper check (bsc#1137526). - CVE-2019-9718: Fixed a denial of service in the subtitle decode (bsc#1129715). - CVE-2018-13301: Fixed a denial of service while converting a crafted AVI file to MPEG4 (bsc#1100352).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse5 products
- ffmpeg&distro=SUSE Linux Enterprise Module for Desktop Applications 15< 3.4.2-4.27.1
- ffmpeg&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP1< 3.4.2-4.27.1
- ffmpeg&distro=SUSE Linux Enterprise Module for Package Hub 15< 3.4.2-4.27.1
- ffmpeg&distro=SUSE Linux Enterprise Workstation Extension 15< 3.4.2-4.27.1
- ffmpeg&distro=SUSE Linux Enterprise Workstation Extension 15 SP1< 3.4.2-4.27.1
1 vendor · 5 products