VDB

GCVE-110-MAGEIA-2020-46

GCVE-110-MAGEIA-2020-46
Advisory Published
Vulnetix · Advisory published January 22, 2020
Updated ffmpeg packages fix security vulnerabilities: This update provides ffmpeg version 4.1.5, which fixes several bugs, and atleasst the follwing security vulnerabilities: In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer (CVE-2019-17539). FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/ vqavideo.c (CVE-2019-17542).

Affected Products

VendorProductVersionsPlatforms
Mageiaffmpeg0 (affected), 4.1.5-1.mga7 (unaffected), 0 (affected), 4.1.5-1.mga7.tainted (unaffected), 0 (affected), 4.1.5-1.mga7 (unaffected), 0 (affected), 4.1.5-1.mga7.tainted (unaffected)
Mageiarstudio0 (affected), 1.2.1335-1.4.mga7 (unaffected)
Mageiaradicale1.1.1-7.1.mga7 (unaffected), 0 (affected)

Browse GCVE Records

74,366 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›