CVE-2021-38093

Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.

This update for ffmpeg fixes the following issues:

• CVE-2021-3566: Fixed information leak (bsc#1189166).
• CVE-2021-38093: Fixed integer overflow vulnerability in filter_robert() (bsc#1190734)
• CVE-2021-38092: Fixed integer overflow vulnerability in filter_prewitt() (bsc#1190733)
• CVE-2021-38094: Fixed integer overflow vulnerability in filter_sobel() (bsc#1190735)
• CVE-2020-22037: Fixed denial of service vulnerability caused by memory leak in avcodec_alloc_context3() (bsc#1186756)
• CVE-2020-35965: Fixed out-of-bounds write in decode_frame() (bsc#1187852)
• CVE-2020-20892: Fixed an issue with filter_frame() (bsc#1190719)
• CVE-2020-20891: Fixed a buffer overflow vulnerability in config_input() (bsc#1190718)
• CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name (bsc#1190722)
• CVE-2020-20896: Fixed an issue with latm_write_packet() (bsc#1190723)
• CVE-2020-20899: Fixed a buffer overflow vulnerability in config_props() (bsc#1190726)
• CVE-2020-20902: Fixed an out-of-bounds read vulnerabilit long_term_filter() (bsc#1190729)

This update for ffmpeg fixes the following issues:

• CVE-2021-3566: Fixed information leak (bsc#1189166).
• CVE-2021-38093: Fixed integer overflow vulnerability in filter_robert() (bsc#1190734)
• CVE-2021-38092: Fixed integer overflow vulnerability in filter_prewitt() (bsc#1190733)
• CVE-2021-38094: Fixed integer overflow vulnerability in filter_sobel() (bsc#1190735)
• CVE-2020-22037: Fixed denial of service vulnerability caused by memory leak in avcodec_alloc_context3() (bsc#1186756)
• CVE-2020-35965: Fixed out-of-bounds write in decode_frame() (bsc#1187852)
• CVE-2020-20892: Fixed an issue with filter_frame() (bsc#1190719)
• CVE-2020-20891: Fixed a buffer overflow vulnerability in config_input() (bsc#1190718)
• CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name (bsc#1190722)
• CVE-2020-20896: Fixed an issue with latm_write_packet() (bsc#1190723)
• CVE-2020-20899: Fixed a buffer overflow vulnerability in config_props() (bsc#1190726)
• CVE-2020-20902: Fixed an out-of-bounds read vulnerabilit long_term_filter() (bsc#1190729)

This update for ffmpeg fixes the following issues:

• CVE-2022-3109: Fixed null pointer dereference in vp3_decode_frame() (bsc#1206442).
• CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the link_filter_inouts function in libavfilter/graphparser.c. (bsc#1186761)
• CVE-2021-38094: Fixed an integer overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c (bsc#1190735).
• CVE-2021-38093: Fixed an integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c (bsc#1190734).
• CVE-2021-38092: Fixed an Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c (bsc#1190733).
• CVE-2020-22037: Fixed a denial of service vulnerability due to a memory leak in avcodec_alloc_context3 at options.c (bsc#1186756).
• CVE-2021-3566: Fixed an exposure of sensitive information on ffmpeg version prior to 4.3 (bsc#1189166).
• CVE-2020-35965: Fixed an out-of-bounds write in decode_frame in libavcodec/exr.c (bsc#1187852).
• CVE-2020-20892: Fixed a division by zero in function filter_frame in libavfilter/vf_lenscorrection.c (bsc#1190719).
• CVE-2020-20891: Fixed a buffer overflow vulnerability in function config_input in libavfilter/vf_gblur.c (bsc#1190718).
• CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name in libavfilter/vf_avgblur.c (bsc#1190722).
• CVE-2020-20896: Fixed a NULL pointer dereference in function latm_write_packet in libavformat/latmenc.c (bsc#1190723).
• CVE-2020-20899: Fixed a buffer overflow vulnerability in function config_props in libavfilter/vf_bwdif.c (bsc#1190726).
• CVE-2020-20902: Fixed an out-of-bounds read vulnerability in long_term_filter function in g729postfilter.c (bsc#1190729).

It was discovered that FFmpeg incorrectly managed memory resulting in a memory leak. An attacker could possibly use this issue to cause a denial of service via application crash. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-22038)

It was discovered that FFmpeg incorrectly handled certain input files, leading to an integer overflow. An attacker could possibly use this issue to cause a denial of service via application crash. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-20898, CVE-2021-38090, CVE-2021-38091, CVE-2021-38092, CVE-2021-38093, CVE-2021-38094)

It was discovered that FFmpeg incorrectly managed memory, resulting in a memory leak. If a user or automated system were tricked into processing a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. (CVE-2022-48434)