CVE-2021-38092: Integer Overflow

Reference Links

• https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
• https://trac.ffmpeg.org/ticket/8263
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38092
• https://ubuntu.com/security/notices/USN-6449-1
• https://nvd.nist.gov/vuln/detail/CVE-2021-38092
• https://launchpad.net/bugs/cve/CVE-2021-38092
• https://security-tracker.debian.org/tracker/CVE-2021-38092
• https://ubuntu.com/security/CVE-2021-38092

Parent vulnerabilities

(Appears in the following advisories)

• USN-6449-1

Frequently Asked Questions

• What is the vulnerability ID for this issue?

  The vulnerability ID for this issue is CVE-2021-38092.

• What component of Ffmpeg is affected by this vulnerability?

  The function filter_prewitt in libavfilter/vf_convolution.c is affected by this vulnerability.

• What is the severity of CVE-2021-38092?

  The severity of CVE-2021-38092 is high, with a CVSS score of 8.8.

• What are the possible impacts of this vulnerability?

  This vulnerability can cause a Denial of Service or other unspecified impacts.

• How can I fix this vulnerability in Ffmpeg 4.2.1?

  To fix this vulnerability, upgrade Ffmpeg to version 7:4.2.7-0ubuntu0.1+ or higher.

• Are there any additional references for CVE-2021-38092?

  Yes, you can refer to these sources for more information: [Git Commit](https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23), [FFmpeg Ticket](https://trac.ffmpeg.org/ticket/8263), and [CVE Details](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38092).