CVE-2021-38090: Integer Overflow

Q: What is CVE-2021-38090?

CVE-2021-38090 is an integer overflow vulnerability in the function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1.

Q: What are the potential impacts of CVE-2021-38090?

The potential impacts of CVE-2021-38090 include Denial of Service or other unspecified impacts.

Q: What is the severity of CVE-2021-38090?

The severity of CVE-2021-38090 is high, with a severity score of 8.8.

Q: Which software versions are affected by CVE-2021-38090?

Ffmpeg 4.2.1 is affected by CVE-2021-38090.

Q: How can CVE-2021-38090 be fixed?

To fix CVE-2021-38090, it is recommended to update to a patched version of Ffmpeg.

Published Sep 20, 2021

Updated

Integer Overflow vulnerability in function filter16roberts in libavfilter/vfconvolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.

Affected Software

3 affected componentsFixes available

ubuntu/ffmpeg<7:4.2.7-0ubuntu0.1+

7:4.2.7-0ubuntu0.1+

debian/ffmpeg<=7:4.1.9-0+deb10u1, <=7:4.1.11-0+deb10u1

7:4.3.6-0+deb11u17:5.1.4-0+deb12u17:6.1.1-1

FFmpeg FFmpeg=4.2.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/ffmpeg to a version that resolves this vulnerability.
Fixed in 7:4.2.7-0ubuntu0.1+
Upgrade
Upgrade debian/ffmpeg to a version that resolves this vulnerability.
Fixed in 7:4.3.6-0+deb11u1Fixed in 7:5.1.4-0+deb12u1Fixed in 7:6.1.1-1

Event History

Sep 20, 2021

CVE Published

via Ubuntu·12:00 AM

CVE Published

via MITRE·03:20 PM

Data Sourced

via MITRE·03:20 PM

Description

Data Sourced

via NVD·04:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Jan 11, 2024

Data Sourced

via Launchpad·11:58 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

USN-6449-1

Frequently Asked Questions

What is CVE-2021-38090?

CVE-2021-38090 is an integer overflow vulnerability in the function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1.

What are the potential impacts of CVE-2021-38090?

The potential impacts of CVE-2021-38090 include Denial of Service or other unspecified impacts.

What is the severity of CVE-2021-38090?

The severity of CVE-2021-38090 is high, with a severity score of 8.8.

Which software versions are affected by CVE-2021-38090?

Ffmpeg 4.2.1 is affected by CVE-2021-38090.

How can CVE-2021-38090 be fixed?

To fix CVE-2021-38090, it is recommended to update to a patched version of Ffmpeg.

CVE-2021-38090: Integer Overflow

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

What is CVE-2021-38090?

What are the potential impacts of CVE-2021-38090?

What is the severity of CVE-2021-38090?

Which software versions are affected by CVE-2021-38090?

How can CVE-2021-38090 be fixed?

Company

Resources

Contact