CVE-2019-15942: High severity FFmpeg FFmpeg vulnerability
FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/ffmpegto a version that resolves this vulnerability.Fixed in 4.2.1-r0 - Upgrade
Upgrade
alpine/ffmpeg4to a version that resolves this vulnerability.Fixed in 4.2.1-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15942?
The severity of CVE-2019-15942 is classified as medium due to the potential for exploitation affecting memory integrity.
How do I fix CVE-2019-15942?
To fix CVE-2019-15942, upgrade FFmpeg to version 4.3 or later where the issue is resolved.
What are the effects of CVE-2019-15942?
CVE-2019-15942 can lead to undefined behavior including crashes or other exploits due to uninitialized values.
Which versions of FFmpeg are affected by CVE-2019-15942?
FFmpeg versions up to and including 4.2 are affected by CVE-2019-15942.
Is CVE-2019-15942 a known issue in FFmpeg?
Yes, CVE-2019-15942 is a recognized vulnerability documented in FFmpeg's security advisories.