CVE-2021-28429

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a denial of service (DoS) via crafted .mov file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Aug 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-284348.8Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2021-284355.5Windows Event Tracing Information Disclosure VulnerabilityCVE-2021-284367.8Windows Speech Runtime Elevation of Privilege VulnerabilityCVE-2021-284375.5Windows Installer Information Disclosure VulnerabilityCVE-2021-284385.5Windows Console Driver Denial of Service VulnerabilityCVE-2021-284397.5Windows TCP/IP Driver Denial of Service VulnerabilityCVE-2021-284407.0Windows Installer Elevation of Privilege VulnerabilityCVE-2021-284416.5Windows Hyper-V Information Disclosure VulnerabilityCVE-2021-284426.5Windows TCP/IP Information Disclosure VulnerabilityCVE-2021-284435.5Windows Console Driver Denial of Service VulnerabilityCVE-2021-284445.7Windows Hyper-V Security Feature Bypass VulnerabilityCVE-2021-284458.1Windows Network File System Remote Code Execution Vulnerability
CVE-2021-28429: Medium severity, CVSS 5.5 | Vulnix