CVE-2021-38091: Integer Overflow

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2021-38091.

Q: What is the severity level of CVE-2021-38091?

The severity level of CVE-2021-38091 is high (8.8).

Q: How can this vulnerability be exploited?

This vulnerability can be exploited by attackers to cause a Denial of Service or other unspecified impacts.

Q: Which software versions are affected by CVE-2021-38091?

Ffmpeg 4.2.1 is affected by CVE-2021-38091.

Q: Are there any fixes or patches available for this vulnerability?

Fixes or patches are available for Ffmpeg version 7:4.2.7-0ubuntu0.1+ (Ubuntu), version 7:4.3.6-0+deb11u1, 7:5.1.3-1, and 7:6.0-7 (Debian).

Published Sep 20, 2021

Updated

Integer Overflow vulnerability in function filter16sobel in libavfilter/vfconvolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.

Affected Software

3 affected componentsFixes available

ubuntu/ffmpeg<7:4.2.7-0ubuntu0.1+

7:4.2.7-0ubuntu0.1+

debian/ffmpeg<=7:4.1.9-0+deb10u1, <=7:4.1.11-0+deb10u1

7:4.3.6-0+deb11u17:5.1.4-0+deb12u17:6.1.1-1

FFmpeg FFmpeg=4.2.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/ffmpeg to a version that resolves this vulnerability.
Fixed in 7:4.2.7-0ubuntu0.1+
Upgrade
Upgrade debian/ffmpeg to a version that resolves this vulnerability.
Fixed in 7:4.3.6-0+deb11u1Fixed in 7:5.1.4-0+deb12u1Fixed in 7:6.1.1-1

Event History

Sep 20, 2021

CVE Published

via Ubuntu·12:00 AM

CVE Published

via MITRE·03:20 PM

Data Sourced

via MITRE·03:20 PM

Description

Data Sourced

via NVD·04:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Jan 11, 2024

Data Sourced

via Launchpad·11:58 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

USN-6449-1

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2021-38091.

What is the severity level of CVE-2021-38091?

The severity level of CVE-2021-38091 is high (8.8).

How can this vulnerability be exploited?

This vulnerability can be exploited by attackers to cause a Denial of Service or other unspecified impacts.

Which software versions are affected by CVE-2021-38091?

Ffmpeg 4.2.1 is affected by CVE-2021-38091.

Are there any fixes or patches available for this vulnerability?

Fixes or patches are available for Ffmpeg version 7:4.2.7-0ubuntu0.1+ (Ubuntu), version 7:4.3.6-0+deb11u1, 7:5.1.3-1, and 7:6.0-7 (Debian).

CVE-2021-38091: Integer Overflow

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

What is the vulnerability ID for this issue?

What is the severity level of CVE-2021-38091?

How can this vulnerability be exploited?

Which software versions are affected by CVE-2021-38091?

Are there any fixes or patches available for this vulnerability?

Company

Resources

Contact