{"id":"CVE-2022-3965","summary":"ffmpeg QuickTime Graphics Video Encoder smcenc.c smc_encode_stream out-of-bounds","details":"A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. The attack can be initiated remotely. The name of the patch is 13c13109759090b7f7182480d075e13b36ed8edd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213544.","modified":"2026-08-17T05:26:15.650119Z","published":"2022-11-13T00:00:00Z","database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-119"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3965.json"},"references":[{"type":"WEB","url":"https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/13c13109759090b7f7182480d075e13b36ed8edd"},{"type":"WEB","url":"https://vuldb.com/?id.213544"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3965.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3965"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202312-14"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.ffmpeg.org/ffmpeg.git","events":[{"introduced":"390d6853d0ef408007feb39c0040682c81c02751"},{"fixed":"0e15444aceca0e78f99f3d67758eb79d11b86599"},{"introduced":"b189550137155a622f88df6e64e72c2cca660854"},{"fixed":"963937e408fc68b5925f938a253cfff1d506f784"},{"fixed":"13c13109759090b7f7182480d075e13b36ed8edd"}],"database_specific":{"extracted_events":[{"introduced":"5.0"},{"fixed":"5.0.3"},{"introduced":"5.1"},{"fixed":"5.1.3"}],"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*"}}],"versions":["n5.0.2","n5.1.2","n5.1.1","n5.1","n5.2-dev","n5.0.1","n5.0","n5.1-dev"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3965.json","vanir_signatures_modified":"2026-08-17T05:26:15Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["166010880869980644927946352734539447169","28749783968029494324669826365557320436","153298689612915501759381176926397746520","166445231644184434206156120113608946204","268136333524296357139407585922661621563","181465321204535363746862606963793996773","143989011595441305650354071117417042849","238440885231027251129894564031494403420","339852368224551184541135631273888522175","18492705378672110694043731024255712660","234066564647180187288767163031530183264","309913977609099491935355003235629596206","190958886137716854716715974481460587660","88393916420612352388369718695562694141","302416324580361760910054094630420808902","106075582890067589075450998721535111045","293101080751534630978069792907607575588","248484858729761866417201092109216596311","201149934476676307963052600693507825726","115205947053224738246692932697149992624","230724208418225760337208772465907187725","252663940777125681973041535588016690502","73000538076602617036923166363073399458","233578929152178380537846601563854206144","71684203348156152722570606938494820289","155757810989673760949567272907739916632","78402934401618155076994422666817974404","269132301595052113705854573577860256069","223789089500231944883805754297737763666","257379051557807290516557285965769708153","106680754146998371329107079401282882071","171832269121795250346892865558130137145","233578929152178380537846601563854206144","15454534153350204939404401109905678364","306404808657678241439185148328962855517","281825131346964356452011655214040123064","252922269907363603395177202866588493830","282345378525175096129217401136972948410","37016024802849611231122355444431275424","148349989913238801855162560122927677464","317644023786757629607500580422157883429","123307118732718145742072785544375048608"],"threshold":0.9},"id":"CVE-2022-3965-9cead814","signature_type":"Line","signature_version":"v1","source":"https://git.ffmpeg.org/ffmpeg.git@13c13109759090b7f7182480d075e13b36ed8edd","target":{"file":"libavcodec/smcenc.c"}},{"deprecated":false,"digest":{"function_hash":"287492854331046900464273540010346992315","length":7106},"id":"CVE-2022-3965-b066246c","signature_type":"Function","signature_version":"v1","source":"https://git.ffmpeg.org/ffmpeg.git@13c13109759090b7f7182480d075e13b36ed8edd","target":{"file":"libavcodec/smcenc.c","function":"smc_encode_stream"}}]}},{"ranges":[{"type":"GIT","repo":"https://github.com/ffmpeg/ffmpeg","events":[{"introduced":"390d6853d0ef408007feb39c0040682c81c02751"},{"fixed":"0e15444aceca0e78f99f3d67758eb79d11b86599"},{"introduced":"b189550137155a622f88df6e64e72c2cca660854"},{"fixed":"963937e408fc68b5925f938a253cfff1d506f784"}],"database_specific":{"cpe":"cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.0"},{"fixed":"5.0.3"},{"introduced":"5.1"},{"fixed":"5.1.3"}],"source":"CPE_RANGE"}}],"versions":["n5.0.2","n5.1.2","n5.1.1","n5.1","n5.0.1","n5.0","n5.1-dev"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3965.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"}]}