GHSA-gvhq-52vj-fjq3

GHSA-gvhq-52vj-fjq3 PUBLISHED

Record from GitHub Advisory Database · Published May 17, 2022

The mjpeg_decode_scan_progressive_ac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data.

Timeline

May 17, 2022 CVE Published
Apr 9, 2026 Distribution Patch
Apr 29, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-gvhq-52vj-fjq3
vulnetix vdb fixes GHSA-gvhq-52vj-fjq3

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-gvhq-52vj-fjq3/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

http://www.ffmpeg.org/security.html url
http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=1f41cffe1e3e79620f587545bdfcbd7e6e68ed29 url
http://www.debian.org/security/2013/dsa-2793 url
https://nvd.nist.gov/vuln/detail/CVE-2013-0854 advisory
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=1f41cffe1e3e79620f587545bdfcbd7e6e68ed29 url

Look up in the Resolve Platform →