DeutschShown in its original language — a full translation is planned for a future version.
ffmpeg: Mehrere Schwachstellen
view advisory published 2021-05-26
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ffmpeg ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Informationen offenzulegen oder beliebigen Code auszuführen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-22028US | medium6.5 | — | ||
Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service. | ||||
| CVE-2020-22026US | medium6.5 | — | ||
Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a Denial of Service. | ||||
| CVE-2020-22024US | medium6.5 | — | ||
Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of Service. | ||||
| CVE-2020-22021US | medium6.5 | — | ||
Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Service. | ||||
| CVE-2020-22020US | medium6.5 | — | ||
Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Denial of Service. | ||||
| CVE-2020-22019US | medium6.5 | — | ||
Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Service. | ||||
| CVE-2020-22015US | high8.8 | — | ||
Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive inform… | ||||
| CVE-2020-24020US | high8.8 | — | ||
Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c due to a call to memcpy without length checks, which could… | ||||
02
references
External citations — patches, advisories, analysis.
- Debian Security Advisory DLA-2742 vom 2021-08-15external
- openSUSE Security Update OPENSUSE-SU-2025:14880-1 vom 2025-03-13external
- SUSE Security Update SUSE-SU-2021:2322-1 vom 2021-07-14external
- SUSE Security Update SUSE-SU-2021:2929-1 vom 2021-09-02external
- SUSE Security Update SUSE-SU-2024:1909-1 vom 2024-06-03external
- SUSE Security Update SUSE-SU-2024:1907-1 vom 2024-06-03external
- SUSE Security Update SUSE-SU-2025:0958-1 vom 2025-03-19external
- NIST - NATIONAL VULNERABILITY DATABASE vom 2021-05-26external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan