What’s Vulnerable › Vulnerabilities

CVE-2019-15942

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-09-05 · updated 2026-06-17
• Weakness: CWE-252

Description

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer.

Affected products

• FFmpeg: through 4.2

References

• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html
• https://security.gentoo.org/glsa/202007-58
• https://trac.ffmpeg.org/ticket/8093
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html
• https://security.gentoo.org/glsa/202007-58
• https://trac.ffmpeg.org/ticket/8093

Get alerted when CVE-2019-15942 or the next vulnerability affects your stack