CVE-2021-3566 Information

Description

Prior to ffmpeg version 4.3 the tty demuxer did not have a ‘read_probe’ function assigned to it. By crafting a legitimate fconcat\ file that references an image followed by a file the triggers the tty demuxer the contents of the second file will be copied into the output file verbatim (as long as the -vcodec copy option is passed to ffmpeg).

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Reference

https://github.com/FFmpeg/FFmpeg/commit/3bce9e9b3ea35c54bacccc793d7da99ea5157532#diff-74f6b92a0541378ad15de9c29c0a2b0c69881ad9ffc71abe568b88b535e00a7f https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

NONE

Base Score

NONE

Base Severity

5.5