CVE-2020-22031: Buffer Overflow
A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vfw3fdif.c in filter16complexlow, which might lead to memory corruption and other potential consequences.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:4.3.7-0+deb11u1Fixed in 7:4.3.8-0+deb11u1Fixed in 7:5.1.6-0+deb12u1Fixed in 7:7.0.2-3Fixed in 7:7.1-3
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-22031.
Where does the vulnerability exist?
The vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low.
What are the potential consequences of this vulnerability?
The potential consequences of this vulnerability include memory corruption and other potential issues.
Which software versions are affected?
The affected software versions include FFmpeg 3.4.11-0ubuntu0.1, FFmpeg 4.2.7-0ubuntu0.1, FFmpeg 4.3, FFmpeg 2.8.17-0ubuntu0.1+, and FFmpeg 4.1.9-0+deb10u1, 4.1.11-0+deb10u1, 4.3.6-0+deb11u1, 5.1.3-1, and 6.0-7.
How can I fix this vulnerability?
To fix this vulnerability, update to the appropriate version of FFmpeg as mentioned in the affected software section.