Hole in widely-used FFmpeg codec could crash media servers or enable RCE | CSO Online

https://www.csoonline.com/article/4188531/hole-in-widely-used-ffmpeg-codec-could-crash-media-servers-or-enable-rce.html

24 points · 4 comments · view on lemmy.world

4 Comments

strawberry_enjoyer42@lemmy.blahaj.zone · 3 pts · 85d

Good thing I already crashed mine! /s

ATS1312@lemmy.dbzer0.com · 1 pts · 85d (1 reply)

Okay, did the researcher patch it? Or just throw shade at a hobbyist project?

whats_a_lemmy@midwest.social · 4 pts · 85d

I dunno if "hobbyist" is the right characterization for FFmpeg. This issue is fixed, though.

Mikelius@lemmy.ml · 1 pts · 84d

Don't see it on here, but anther article I read said it requires ASLR to be disabled to be exploited. So unless you're messing with those values manually, I don't imagine many people are at major risk here. Unless that other article was wrong lol. Can't figure out where I read that so I don't have a source, sorry!