Package
ffmpeg-fips-7.1-libavutil59
Component
ffmpeg-fips-7.1-libavutil59
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
Fixed upstream by commit db05df9d135fb56a4babb836d5e9f5c1d984e087 (avcodec/cfhd: reject transform-2 output wider than the plane) for an out-of-bounds heap write in the CFHD decoder's transform-2 path. The fix has been cherry-picked onto the release/9.0 and release/8.1 branches and shipped in n9.0 and n8.1.3. It has not been backported to the 7.1 release branch: n7.1.5 remains the newest tag on that branch and the branch tip still contains the vulnerable code. Awaiting an upstream release on this series.
Status
Impact
Fix committed upstream (commit db05df9) for an out-of-bounds heap write in the CFHD decoder's transform-2 path; no point release containing it has been tagged yet.
Status