CVE-2021-3566

Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim (as long as the `-vcodec copy` option is passed to ffmpeg).

• CWE-200

• https://github.com/FFmpeg/FFmpeg/commit/3bce9e9b3ea35c54bacccc793d7da99ea5157532#diff-74f6b92a0541378ad15de9c29c0a2b0c69881ad9ffc71abe568b88b535e00a7fPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/08/msg00018.htmlMailing List, Third Party Advisory
• https://github.com/FFmpeg/FFmpeg/commit/3bce9e9b3ea35c54bacccc793d7da99ea5157532#diff-74f6b92a0541378ad15de9c29c0a2b0c69881ad9ffc71abe568b88b535e00a7fPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/08/msg00018.htmlMailing List, Third Party Advisory

Published

Aug 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-35654Vulnerability in the Essbase Administration Services product…7.5
• CVE-2021-35655Vulnerability in the Essbase Administration Services product…5.3
• CVE-2021-35656Vulnerability in the Oracle Outside In Technology product of…7.5
• CVE-2021-35657Vulnerability in the Oracle Outside In Technology product of…7.5
• CVE-2021-35658Vulnerability in the Oracle Outside In Technology product of…7.5
• CVE-2021-35659Vulnerability in the Oracle Outside In Technology product of…7.5
• CVE-2021-35660Vulnerability in the Oracle Outside In Technology product of…7.5
• CVE-2021-35661Vulnerability in the Oracle Outside In Technology product of…7.5
• CVE-2021-35662Vulnerability in the Oracle Outside In Technology product of…7.5
• CVE-2021-35665Vulnerability in the Hyperion Financial Reporting product of…6.1
• CVE-2021-35666Vulnerability in the Oracle HTTP Server product of Oracle Fu…5.9
• CVE-2021-3567A flaw was found in Caribou due to a regression of CVE-2020-…7.5