Package
ffmpeg-8.1
Component
ffmpeg-8.1
Latest update
Fixed version
8.1.3-r0
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
8.1.3-r0Impact
Fixed in the 8.1.3 release by release/8.1 commit 0353c8d5d3c1, a backport of master commit 983dae9c19f4 ("avformat/rtpenc_av1: bound OBU size in the keyframe search loop"). The commit is an ancestor of tag n8.1.3 and not of n8.1.2. The first apk built from n8.1.3 is 8.1.3-r0, and the compiled keyframe search loop in ff_rtp_send_av1 gains an unsigned bound check that 8.1.2-r4 lacks. Scanners still match because the CVE affected range is an unbounded git commit range.
Status