FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity.
Weakness
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ffmpeg | Ffmpeg | 4.2 (including) | 4.2 (including) |
| Ffmpeg | Ubuntu | trusty | * |
| Ffmpeg | Ubuntu | upstream | * |
| Qtwebengine-opensource-src | Ubuntu | bionic | * |
| Qtwebengine-opensource-src | Ubuntu | focal | * |
| Qtwebengine-opensource-src | Ubuntu | hirsute | * |
| Qtwebengine-opensource-src | Ubuntu | impish | * |
| Qtwebengine-opensource-src | Ubuntu | kinetic | * |
| Qtwebengine-opensource-src | Ubuntu | lunar | * |
| Qtwebengine-opensource-src | Ubuntu | mantic | * |
| Qtwebengine-opensource-src | Ubuntu | oracular | * |
| Qtwebengine-opensource-src | Ubuntu | plucky | * |
| Qtwebengine-opensource-src | Ubuntu | trusty | * |
| Qtwebengine-opensource-src | Ubuntu | xenial | * |
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/111.html
- https://cwe.mitre.org/data/definitions/141.html
- https://cwe.mitre.org/data/definitions/142.html
- https://cwe.mitre.org/data/definitions/148.html
- https://cwe.mitre.org/data/definitions/218.html
- https://cwe.mitre.org/data/definitions/384.html
- https://cwe.mitre.org/data/definitions/385.html
- https://cwe.mitre.org/data/definitions/386.html
- https://cwe.mitre.org/data/definitions/387.html
- https://cwe.mitre.org/data/definitions/388.html
- https://cwe.mitre.org/data/definitions/665.html
- https://cwe.mitre.org/data/definitions/701.html