CVE-2022-1475

MEDIUM

FFmpeg < 4.4.2 and < 5.0.1 - Integer Overflow in g729_parse()

Title source: llm

Description

An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.

References (3)

Core 3

Core References

Third Party Advisory vendor-advisory

https://security.gentoo.org/glsa/202312-14

Issue Tracking, Patch, Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2076764

Exploit, Patch, Vendor Advisory

https://trac.ffmpeg.org/ticket/9651

Scores

CVSS v3 5.5

EPSS 0.0009

EPSS Percentile 26.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-190

Status published

Products (2)

ffmpeg/ffmpeg 5.0

ffmpeg/ffmpeg 4.2 - 4.4.2

Published May 02, 2022

Tracked Since Feb 18, 2026