CVE-2020-21041: Buffer Overflow
Buffer Overflow vulnerability exists in FFmpeg 4.1 via apngdoinverseblend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:4.3.7-0+deb11u1Fixed in 7:4.3.8-0+deb11u1Fixed in 7:5.1.6-0+deb12u1Fixed in 7:7.0.2-3Fixed in 7:7.1-3 - Upgrade
Upgrade
alpine/ffmpegto a version that resolves this vulnerability.Fixed in 4.4-r0 - Upgrade
Upgrade
alpine/ffmpeg4to a version that resolves this vulnerability.Fixed in 4.4-r0
Event History
Frequently Asked Questions
What is the vulnerability ID of this buffer overflow vulnerability?
The vulnerability ID of this buffer overflow vulnerability is CVE-2020-21041.
In which version of FFmpeg does this vulnerability exist?
This vulnerability exists in FFmpeg version 4.1.
What is the root cause of this vulnerability?
The root cause of this vulnerability is a buffer overflow in the apng_do_inverse_blend function in libavcodec/pngenc.c.
What can a remote malicious user do with this vulnerability?
A remote malicious user can exploit this vulnerability to cause a Denial of Service (DoS) attack.
Are there any remedies available for this vulnerability?
Yes, there are remedies available for this vulnerability. Please refer to the provided references for more information.