CVE-2021-33815

HIGH

Ffmpeg - Improper Array Index Validation

Title source: rule

dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly checked.

Core 2

Core References

Third Party Advisory vendor-advisory

Patch, Third Party Advisory

CVSS v3 8.8

EPSS 0.0012

EPSS Percentile 30.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-129

Status published

Products (1)

ffmpeg/ffmpeg 4.4

Published Jun 03, 2021

Tracked Since Feb 18, 2026