Name | CVE-2019-12730 |
Description | aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables. |
Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more) |
References | DSA-4449-1, DSA-4502-1 |
Debian Bugs | 932469 |
The table below lists information on source packages.
The information below is based on the following data on fixed versions.