SUSE-SU-2024:1470-1: ffmpeg-4&distro=openSUSE Leap 15.5
Vulnerability summary
SUSE-SU-2024:1470-1 is a vulnerability in ffmpeg-4&distro=openSUSE Leap 15.5 with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 29-04-2024PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for ffmpeg-4 This update for ffmpeg-4 fixes the following issues: - CVE-2024-31578: Fixed heap use-after-free via av_hwframe_ctx_init() when vulkan_frames init failed (bsc#1223070) - CVE-2023-49502: Fixed heap buffer overflow via the ff_bwdif_filter_intra_c function in libavfilter/bwdifdsp.c (bsc#1223235) - CVE-2023-51793: Fixed heap buffer overflow in the image_copy_plane function in libavutil/imgutils.c (bsc#1223272)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse6 products
- ffmpeg-4&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 4.4-150400.3.24.1
- ffmpeg-4&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 4.4-150400.3.24.1
- ffmpeg-4&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5< 4.4-150400.3.24.1
- ffmpeg-4&distro=SUSE Linux Enterprise Server 15 SP4-LTSS< 4.4-150400.3.24.1
- ffmpeg-4&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4< 4.4-150400.3.24.1
Opensuse1 product
- ffmpeg-4&distro=openSUSE Leap 15.5< 4.4-150400.3.24.1
2 vendors · 7 products