Launchpad.net

CVE 2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.

CVE-2021-38114 (Candidate) is related to these bugs:

Bug #1970674: New bug fix releases 3.4.11, 4.2.7 and 4.4.2

		In	Importance	Status
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu)	Undecided	Fix Released
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu Focal)	Undecided	Fix Released
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu Jammy)	Undecided	Fix Released
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu Impish)	Undecided	Fix Released
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu Bionic)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.