CVE-2021-38114

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-252

Affected software

No affected versions have been published.

Timeline

Published
Aug 4, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-381156.5read_header_tga in gd_tga.c in the GD Graphics Library (aka LibGD) through 2.3.2 allows remote attackers to cause a denial of service (out-oCVE-2021-381168.8Possible Elevation of Privilege Vulnerability in iManager has been discovered in OpenText™ iManager. This impacts all versions before 3.2.5CVE-2021-381179.8Possible Command injection Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.CVE-2021-381187.8Possible improper input validation Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.CVE-2021-381196.1Possible Reflected Cross-Site Scripting (XSS) Vulnerability in iManager has been discovered in OpenText™ iManager 3.2.4.0000.CVE-2021-38126.1adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2021-381207.2A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backupCVE-2021-381218.8Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessedCVE-2021-381228.2A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive inCVE-2021-381236.1Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05CVE-2021-381249.8Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5.CVE-2021-381259.8Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer version
CVE-2021-38114: Medium severity, CVSS 5.5 | Vulnix