CVE Vulnerabilities

CVE-2021-38114

Unchecked Return Value

Published: Aug 04, 2021 | Modified: Nov 07, 2023
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.

Weakness

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

Affected Software

Name Vendor Start Version End Version
Ffmpeg Ffmpeg 4.4 (including) 4.4 (including)
Ffmpeg Ubuntu bionic *
Ffmpeg Ubuntu esm-apps/xenial *
Ffmpeg Ubuntu focal *
Ffmpeg Ubuntu hirsute *
Ffmpeg Ubuntu impish *
Ffmpeg Ubuntu trusty *
Ffmpeg Ubuntu upstream *
Ffmpeg Ubuntu xenial *

Potential Mitigations

References