{"id":"CVE-2021-38093","aliases":["DEBIAN-CVE-2021-38093","EUVD-2021-24566","GHSA-v6gh-h6v7-p7r2","SUSE-SU-2021:3521-1","SUSE-SU-2023:0005-1","UBUNTU-CVE-2021-38093","USN-6449-1","openSUSE-SU-2021:3521-1"],"status":"published","title":"Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in...","description":"Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01307,"percentile":0.70994,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2021-09-20T15:20:03Z","modified":"2026-10-24T14:12:10Z","fixes":[{"ecosystem":"Debian:12","package":"ffmpeg","fixed_in":["7:4.3-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ffmpeg","fixed_in":["7:4.3-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ffmpeg","fixed_in":["7:4.3-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ffmpeg","fixed_in":["7:4.2.7-0ubuntu0.1+esm3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.3-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.3-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.3-2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-11.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-11.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-11.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-11.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-11.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-11.17.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.4.44.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.4.44.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.4.44.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.4.44.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.4.44.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.4.44.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.4.44.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.4.44.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.4.44.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-150000.4.44.1"}]}],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.2.7-0ubuntu0.1+esm3"}]}],"versions":["7:4.1.4-1build2","7:4.2.1-2","7:4.2.1-2ubuntu1","7:4.2.2-1build1","7:4.2.2-1ubuntu1","7:4.2.4-1ubuntu0.1","7:4.2.4-1ubuntu0.1+esm1","7:4.2.7-0ubuntu0.1","7:4.2.7-0ubuntu0.1+esm1","7:4.2.7-0ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.11-0ubuntu0.1+esm3"}]}],"versions":["7:3.3.4-2","7:3.3.4-2build3","7:3.4-2ubuntu2","7:3.4-4","7:3.4-4build1","7:3.4.1-1","7:3.4.1-1build1","7:3.4.2-1","7:3.4.2-1build1","7:3.4.2-2","7:3.4.4-0ubuntu0.18.04.1","7:3.4.6-0ubuntu0.18.04.1","7:3.4.8-0ubuntu0.2","7:3.4.11-0ubuntu0.1","7:3.4.11-0ubuntu0.1+esm1","7:3.4.11-0ubuntu0.1+esm2"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.2.7-0ubuntu0.1+esm3"}]}],"versions":["7:4.1.4-1build2","7:4.2.1-2","7:4.2.1-2ubuntu1","7:4.2.2-1build1","7:4.2.2-1ubuntu1","7:4.2.4-1ubuntu0.1","7:4.2.4-1ubuntu0.1+esm1","7:4.2.7-0ubuntu0.1","7:4.2.7-0ubuntu0.1+esm1","7:4.2.7-0ubuntu0.1+esm2"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4.2-0ubuntu0.22.04.1+esm2"}]}],"versions":["7:4.4-6ubuntu5","7:4.4.1-2ubuntu1","7:4.4.1-3ubuntu1","7:4.4.1-3ubuntu2","7:4.4.1-3ubuntu3","7:4.4.1-3ubuntu5","7:4.4.2-0ubuntu0.22.04.1","7:4.4.2-0ubuntu0.22.04.1+esm1"],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"ffmpeg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-11.17.1"}]}],"bundled":12}],"products":[{"vendor":"ffmpeg","product":"ffmpeg"}],"references":[{"url":"https://trac.ffmpeg.org/ticket/8263","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Vendor Advisory","report"]},{"url":"https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Vendor Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-38093"},{"url":"https://github.com/advisories/GHSA-v6gh-h6v7-p7r2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-38093","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213521-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1186756","tags":["report"]},{"url":"https://bugzilla.suse.com/1187852","tags":["report"]},{"url":"https://bugzilla.suse.com/1189166","tags":["report"]},{"url":"https://bugzilla.suse.com/1190718","tags":["report"]},{"url":"https://bugzilla.suse.com/1190719","tags":["report"]},{"url":"https://bugzilla.suse.com/1190722","tags":["report"]},{"url":"https://bugzilla.suse.com/1190723","tags":["report"]},{"url":"https://bugzilla.suse.com/1190726","tags":["report"]},{"url":"https://bugzilla.suse.com/1190729","tags":["report"]},{"url":"https://bugzilla.suse.com/1190733","tags":["report"]},{"url":"https://bugzilla.suse.com/1190734","tags":["report"]},{"url":"https://bugzilla.suse.com/1190735","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-20891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-20892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-20895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-20896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-20899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-20902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-22037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38094","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230005-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1186761","tags":["report"]},{"url":"https://bugzilla.suse.com/1206442","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-22042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3109","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-38093","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6449-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-38093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-20898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-22038","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-48434","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVCB2YATP2LRWUBIGFYZQUFV52VSFT2B/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-38093","description":"Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.","status":"published","published":"2021-09-20T15:20:03Z","modified":"2024-08-04T01:30:09.063Z","updated_at":"2026-11-02T14:33:07.349244Z"}],"euvd":[{"id":"EUVD-2021-24566","description":"Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.","status":"published","published":"2021-09-20T15:20:03Z","modified":"2024-08-04T01:30:09Z","updated_at":"2026-11-03T03:24:25.678078Z"}],"ghsa":[{"id":"GHSA-v6gh-h6v7-p7r2","title":"Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in...","description":"Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.","status":"published","published":"2022-05-24T19:15:11Z","modified":"2023-01-30T05:02:18Z","cwes":["CWE-190"],"updated_at":"2026-11-02T14:46:36.658869Z"}],"nvd":[{"id":"CVE-2021-38093","description":"Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.","status":"published","published":"2021-09-20T16:15:11.41Z","modified":"2026-06-17T04:01:27.07Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:06:58.933037Z"}],"osv":[{"id":"CVE-2021-38093","description":"Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.","status":"published","published":"2021-09-20T16:15:11.41Z","modified":"2026-11-07T13:20:16.072150242Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-07T11:15:38.581573Z"},{"id":"DEBIAN-CVE-2021-38093","description":"Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.","status":"published","published":"2021-09-20T16:15:11.41Z","modified":"2026-10-23T18:03:31.299696608Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"UBUNTU-CVE-2021-38093","description":"Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.","status":"published","published":"2021-09-20T16:15:00Z","modified":"2026-04-22T12:58:03.850225Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"openSUSE-SU-2021:3521-1","title":"Security update for ffmpeg","description":"This update for ffmpeg fixes the following issues:\n\n- CVE-2021-3566: Fixed information leak (bsc#1189166).\n- CVE-2021-38093: Fixed integer overflow vulnerability in filter_robert() (bsc#1190734)\n- CVE-2021-38092: Fixed integer overflow vulnerability in filter_prewitt() (bsc#1190733)\n- CVE-2021-38094: Fixed integer overflow vulnerability in filter_sobel() (bsc#1190735)\n- CVE-2020-22037: Fixed denial of service vulnerability caused by memory leak in avcodec_alloc_context3() (bsc#1186756)\n- CVE-2020-35965: Fixed out-of-bounds write in decode_frame() (bsc#1187852)\n- CVE-2020-20892: Fixed an issue with filter_frame() (bsc#1190719)\n- CVE-2020-20891: Fixed a buffer overflow vulnerability in config_input() (bsc#1190718)\n- CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name (bsc#1190722)\n- CVE-2020-20896: Fixed an issue with latm_write_packet() (bsc#1190723)\n- CVE-2020-20899: Fixed a buffer overflow vulnerability in config_props() (bsc#1190726)\n- CVE-2020-20902: Fixed an out-of-bounds read vulnerabilit long_term_filter() (bsc#1190729)\n","status":"published","published":"2021-10-26T13:39:27Z","modified":"2026-02-04T04:37:04.307457Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"SUSE-SU-2021:3521-1","title":"Security update for ffmpeg","description":"This update for ffmpeg fixes the following issues:\n\n- CVE-2021-3566: Fixed information leak (bsc#1189166).\n- CVE-2021-38093: Fixed integer overflow vulnerability in filter_robert() (bsc#1190734)\n- CVE-2021-38092: Fixed integer overflow vulnerability in filter_prewitt() (bsc#1190733)\n- CVE-2021-38094: Fixed integer overflow vulnerability in filter_sobel() (bsc#1190735)\n- CVE-2020-22037: Fixed denial of service vulnerability caused by memory leak in avcodec_alloc_context3() (bsc#1186756)\n- CVE-2020-35965: Fixed out-of-bounds write in decode_frame() (bsc#1187852)\n- CVE-2020-20892: Fixed an issue with filter_frame() (bsc#1190719)\n- CVE-2020-20891: Fixed a buffer overflow vulnerability in config_input() (bsc#1190718)\n- CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name (bsc#1190722)\n- CVE-2020-20896: Fixed an issue with latm_write_packet() (bsc#1190723)\n- CVE-2020-20899: Fixed a buffer overflow vulnerability in config_props() (bsc#1190726)\n- CVE-2020-20902: Fixed an out-of-bounds read vulnerabilit long_term_filter() (bsc#1190729)\n","status":"published","published":"2021-10-26T13:39:26Z","modified":"2026-02-04T03:01:13.927489Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2023:0005-1","title":"Security update for ffmpeg","description":"This update for ffmpeg fixes the following issues:\n\n- CVE-2022-3109: Fixed null pointer dereference in vp3_decode_frame() (bsc#1206442).\n- CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the link_filter_inouts function in libavfilter/graphparser.c. (bsc#1186761)\n- CVE-2021-38094: Fixed an integer overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c (bsc#1190735).\n- CVE-2021-38093: Fixed an integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c (bsc#1190734).\n- CVE-2021-38092: Fixed an Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c (bsc#1190733).\n- CVE-2020-22037: Fixed a denial of service vulnerability due to a memory leak in avcodec_alloc_context3 at options.c (bsc#1186756).\n- CVE-2021-3566: Fixed an exposure of sensitive information on ffmpeg version prior to 4.3 (bsc#1189166).\n- CVE-2020-35965: Fixed an out-of-bounds write in decode_frame in libavcodec/exr.c (bsc#1187852).\n- CVE-2020-20892: Fixed a division by zero in function filter_frame in libavfilter/vf_lenscorrection.c (bsc#1190719).\n- CVE-2020-20891: Fixed a buffer overflow vulnerability in function config_input in libavfilter/vf_gblur.c (bsc#1190718).\n- CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name in libavfilter/vf_avgblur.c (bsc#1190722).\n- CVE-2020-20896: Fixed a NULL pointer dereference in function latm_write_packet in libavformat/latmenc.c (bsc#1190723).\n- CVE-2020-20899: Fixed a buffer overflow vulnerability in function config_props in libavfilter/vf_bwdif.c (bsc#1190726).\n- CVE-2020-20902: Fixed an out-of-bounds read vulnerability in long_term_filter function in g729postfilter.c (bsc#1190729).\n","status":"published","published":"2023-01-02T10:39:08Z","modified":"2026-02-04T04:15:17.492211Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-6449-1","title":"ffmpeg vulnerabilities","description":"It was discovered that FFmpeg incorrectly managed memory resulting \nin a memory leak. An attacker could possibly use this issue to cause\na denial of service via application crash. This issue only \naffected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-22038)\n\nIt was discovered that FFmpeg incorrectly handled certain input files, \nleading to an integer overflow. An attacker could possibly use this issue\nto cause a denial of service via application crash. This issue only \naffected Ubuntu 20.04 LTS. (CVE-2020-20898, CVE-2021-38090, \nCVE-2021-38091, CVE-2021-38092, CVE-2021-38093, CVE-2021-38094)\n\nIt was discovered that FFmpeg incorrectly managed memory, resulting in\na memory leak.  If a user or automated system were tricked into \nprocessing a specially crafted input file, a remote attacker could\npossibly use this issue to cause a denial of service, or execute \narbitrary code. (CVE-2022-48434)\n","status":"published","published":"2023-10-24T10:26:27Z","modified":"2026-04-27T16:47:21.537921233Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}