CVE-2020-20450: Null Pointer Dereference
FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-20450?
CVE-2020-20450 is a vulnerability in FFmpeg 4.2 that allows for a null pointer dereference, resulting in a potential Denial of Service.
How does CVE-2020-20450 impact FFmpeg?
CVE-2020-20450 affects FFmpeg 4.2 by passing a null pointer dereference as an argument to libavformat/aviobuf.c, which could lead to a Denial of Service.
What software versions are affected by CVE-2020-20450?
FFmpeg 4.2.7-0ubuntu0.1 and earlier versions, as well as FFmpeg 4.1.9-0+deb10u1 to 4.1.11-0+deb10u1, 4.3.6-0+deb11u1, 5.1.3-1, and 6.0-7 are affected by CVE-2020-20450.
How can I fix CVE-2020-20450?
To fix CVE-2020-20450, update FFmpeg to version 4.2.7-0ubuntu0.1 or later, or upgrade to a version that includes the necessary security patches.
Where can I find more information about CVE-2020-20450?
You can find more information about CVE-2020-20450 on the CVE Mitre website (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20450), the FFmpeg Trac ticket (https://trac.ffmpeg.org/ticket/7993), and the FFmpeg Git commit (https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=5400e4a50c61e53e1bc50b3e77201649bbe9c510).