CVE-2019-15942: Ffmpeg

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer.

Affected products

• Ffmpeg Ffmpeg: up to and including 4.2

Published 2019-09-05. Last modified 2026-06-17.