CVE-2020-22021: Buffer Overflow
Buffer Overflow vulnerability in FFmpeg 4.2 at filteredges function in libavfilter/vfyadif.c, which could let a remote malicious user cause a Denial of Service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:4.3.7-0+deb11u1Fixed in 7:4.3.8-0+deb11u1Fixed in 7:5.1.6-0+deb12u1Fixed in 7:7.0.2-3Fixed in 7:7.1-3 - Upgrade
Upgrade
alpine/ffmpegto a version that resolves this vulnerability.Fixed in 4.3.3-r0 - Upgrade
Upgrade
alpine/ffmpegto a version that resolves this vulnerability.Fixed in 4.4.1-r0 - Upgrade
Upgrade
alpine/ffmpeg4to a version that resolves this vulnerability.Fixed in 4.4.1-r0
Event History
Frequently Asked Questions
What is CVE-2020-22021?
CVE-2020-22021 is a buffer overflow vulnerability in FFmpeg 4.2 at the filter_edges function in libavfilter/vf_yadif.c.
How does CVE-2020-22021 affect the software?
CVE-2020-22021 could allow a remote malicious user to cause a Denial of Service.
Which versions of FFmpeg are affected by CVE-2020-22021?
Versions 7:3.4.11-0ubuntu0.1, 7:4.2.7-0ubuntu0.1, 7:4.4.2-0ubuntu0.21.10.1, 4.4.1, and 7:2.8.17-0ubuntu0.1+ of FFmpeg are affected by CVE-2020-22021.
How can I fix CVE-2020-22021?
To fix CVE-2020-22021, update FFmpeg to version 7:4.4.1 or later.
Where can I find more information about CVE-2020-22021?
You can find more information about CVE-2020-22021 at the following references: [CVE-2020-22021](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22021), [FFmpeg Ticket](https://trac.ffmpeg.org/ticket/8240), [Ubuntu Security Notice](https://ubuntu.com/security/notices/USN-5472-1).