CVE-2022-1475

Published: 2 May 2022

An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.

Priority

CVSS 3 base score: 5.5

Status

Package	Release	Status
ffmpeg Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	impish	Released (7:4.4.2-0ubuntu0.21.10.1)
	jammy	Released (7:4.4.2-0ubuntu0.22.04.1)
	upstream	Released (7:4.4.2-1)

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1475
https://trac.ffmpeg.org/ticket/9651
https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=757da974b21833529cc41bdcc9684c29660cdfa8
https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=e9e2ddbc6c78cc18b76093617f82c920e58a8d1f (n4.4.2)
https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=fa2e4afe8d0a23fac37392ef6506cfc9841f8d3d (n4.3.4)
https://ubuntu.com/security/notices/USN-5472-1
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

CVE-2022-1475

Medium

Status

References

Join the discussion

Canonical is offering Extended Security Maintenance

Further reading