Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936077 advisory.

    Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg     4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg     4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. (CVE-2021-38090)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1468-1 advisory.

    - CVE-2024-31578: Fixed heap use-after-free via av_hwframe_ctx_init() when vulkan_frames init failed     (bsc#1223070)
    - CVE-2023-49502: Fixed heap buffer overflow via the ff_bwdif_filter_intra_c function in     libavfilter/bwdifdsp.c (bsc#1223235)

    Adding references for already fixed issues:

    - CVE-2021-38091: Fixed integer overflow in function filter16_sobel in libavfilter/vf_convolution.c     (bsc#1190732)
    - CVE-2021-38090: Fixed integer overflow in function filter16_roberts in libavfilter/vf_convolution.c     (bsc#1190731)
    - CVE-2020-20898: Fixed integer overflow vulnerability in function filter16_prewitt in     libavfilter/vf_convolution.c (bsc#1190724)
    - CVE-2020-20901: Fixed buffer overflow vulnerability in function filter_frame in     libavfilter/vf_fieldorder.c (bsc#1190728)
    - CVE-2020-20900: Fixed buffer overflow vulnerability in function gaussian_blur in     libavfilter/vf_edgedetect.c (bsc#1190727)
    - CVE-2020-20894: Fixed buffer Overflow vulnerability in function gaussian_blur in     libavfilter/vf_edgedetect.c (bsc#1190721)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6449-1 advisory.

    It was discovered that FFmpeg incorrectly managed memory resulting

    in a memory leak. An attacker could possibly use this issue to cause a denial of service via application     crash. This issue only

    affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-22038)

    It was discovered that FFmpeg incorrectly handled certain input files,

    leading to an integer overflow. An attacker could possibly use this issue to cause a denial of service via     application crash. This issue only

    affected Ubuntu 20.04 LTS. (CVE-2020-20898, CVE-2021-38090,

    CVE-2021-38091, CVE-2021-38092, CVE-2021-38093, CVE-2021-38094)

    It was discovered that FFmpeg incorrectly managed memory, resulting in a memory leak.

    If a user or automated system were tricked into

    processing a specially crafted input file, a remote attacker could possibly use this issue to cause a     denial of service, or execute

    arbitrary code. (CVE-2022-48434)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
267585	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936077)	Nessus	Unity Linux Local Security Checks	Local	high
250438	Linux Distros Unpatched Vulnerability : CVE-2021-38090	Nessus	Misc.	Local	high
194742	SUSE SLED15: ffmpeg / ffmpeg-private-devel / libavcodec-devel / libavcodec57 / etc (SUSE-SU-2024:1468-1)	Nessus	SuSE Local Security Checks	Local	high
183778	Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM : FFmpeg vulnerabilities (USN-6449-1)	Nessus	Ubuntu Local Security Checks	Local	high

Detections

Analytics

CVE-2021-38090

high

Tenable Plugins

high

high

high

high