libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).
History

Mon, 21 Oct 2024 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-03-29T00:00:00

Updated: 2024-10-21T16:02:08.297Z

Reserved: 2023-03-29T00:00:00

Link: CVE-2022-48434

cve-icon Vulnrichment

Updated: 2024-08-03T15:10:59.913Z

cve-icon NVD

Status : Modified

Published: 2023-03-29T17:15:07.053

Modified: 2024-11-21T07:33:20.487

Link: CVE-2022-48434

cve-icon Redhat

No data.