Uninitialized Memory Disclosure in FFmpeg via SANM Codec

Executive Summary

This vulnerability is an uninitialized stack memory disclosure issue in FFmpeg version 9.0.2. It occurs in the old_codec23() function of libavcodec/sanm.c, where stack memory is leaked into decoded video frames. Attackers can exploit this by providing a specially crafted LucasArts SMUSH/SANM animation file using codec 23 with an inline table.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your FFmpeg version is between 8.0 and 9.0.2. Run 'ffmpeg -version' to see the installed version. If vulnerable, update FFmpeg immediately. Monitor for unusual memory leaks in video decoding processes.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow attackers to access sensitive information stored in the stack memory of the FFmpeg decoder process. If exploited, it may expose internal data, potentially including credentials or other confidential information, through the output video frames.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability involves uninitialized stack memory disclosure in FFmpeg's video decoder, which could expose sensitive process memory in output frames. While not directly targeting regulated data, such memory leaks may violate GDPR's data protection principles if personal data is inadvertently exposed in video frames. HIPAA compliance could be impacted if protected health information appears in decoded video output due to this flaw.

Useful 0 Not Useful 0

Mitigation Strategies

Update FFmpeg to version 9.0.3 or later to address the uninitialized stack memory disclosure vulnerability in libavcodec/sanm.c.

Useful 0 Not Useful 0