Integer Overflow Vulnerability in av_timecode_make_string in FFmpeg 4.3.2

Integer Overflow Vulnerability in av_timecode_make_string in FFmpeg 4.3.2

CVE-2021-28429 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service (DoS) via crafted .mov file.

Learn more about our Web Application Penetration Testing UK.