Skip to content
Snippets Groups Projects
Commit 813d4715 authored by Narpat Mali's avatar Narpat Mali Committed by Steve Sakoman
Browse files

ffmpeg: fix for CVE-2022-48434


libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and
other products, leaves stale hwaccel state in worker threads, which
allows attackers to trigger a use-after-free and execute arbitrary
code in some circumstances (e.g., hardware re-initialization upon a
mid-video SPS change when Direct3D11 is used).

(From OE-Core rev: 392f984ffd95bcd3ce4c364b40425e7808ca7719)

Signed-off-by: default avatarNarpat Mali <narpat.mali@windriver.com>
Signed-off-by: default avatarSteve Sakoman <steve@sakoman.com>
parent 75239ddd
No related merge requests found
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment