DeutschShown in its original language — a full translation is planned for a future version.
ffmpeg: Mehrere Schwachstellen
view advisory published 2021-06-01
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ffmpeg ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (17)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-22056US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c. | ||||
| CVE-2020-22054US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c. | ||||
| CVE-2020-22051US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c. | ||||
| CVE-2020-22049US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c. | ||||
| CVE-2020-22048US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c. | ||||
| CVE-2020-22046US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c. | ||||
| CVE-2020-22044US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c. | ||||
| CVE-2020-22043US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c. | ||||
| CVE-2020-22042US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graphparser.c. | ||||
| CVE-2020-22041US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc. | ||||
| CVE-2020-22040US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c. | ||||
| CVE-2020-22039US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function. | ||||
| CVE-2020-22038US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c. | ||||
| CVE-2020-22037US | medium6.5 | — | ||
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c. | ||||
| CVE-2020-22036US | high8.8 | — | ||
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might lead to memory corruption and other potential consequences. | ||||
| CVE-2020-22035US | high8.8 | — | ||
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might lead to memory corruption and other potential consequences. | ||||
| CVE-2020-22045US | — | — | ||
02
references
External citations — patches, advisories, analysis.
- Debian Security Advisory DLA-2742 vom 2021-08-15external
- Debian Security Advisory DLA-2818 vom 2021-11-14external
- SUSE Security Update SUSE-SU-2025:1128-1 vom 2025-04-03external
- SUSE Security Update SUSE-SU-2025:1128-1 vom 2025-04-03external
- SUSE Security Update SUSE-SU-2021:2322-1 vom 2021-07-14external
- SUSE Security Update SUSE-SU-2021:3293-1 vom 2021-10-06external
- SUSE Security Update SUSE-SU-2021:3521-1 vom 2021-10-26external
- SUSE Security Update SUSE-SU-2021:2919-1 vom 2021-09-02external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan