CVE-2020-22031: Buffer Overflow
Published May 27, 2021
·Updated
A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vfw3fdif.c in filter16complexlow, which might lead to memory corruption and other potential consequences.
Affected Software
4 affected componentsFixes available
debian/ffmpeg
7:4.3.7-0+deb11u17:4.3.8-0+deb11u17:5.1.6-0+deb12u17:7.0.2-37:7.1-3
FFmpeg FFmpeg=4.2
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Remediation
Event History
May 27, 2021
CVE Published
via MITRE·05:44 PM
Data Sourced
via MITRE·05:44 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:45 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:25 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2020-22031.
2
Where does the vulnerability exist?
The vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low.
3
What are the potential consequences of this vulnerability?
The potential consequences of this vulnerability include memory corruption and other potential issues.
4
Which software versions are affected?
The affected software versions include FFmpeg 3.4.11-0ubuntu0.1, FFmpeg 4.2.7-0ubuntu0.1, FFmpeg 4.3, FFmpeg 2.8.17-0ubuntu0.1+, and FFmpeg 4.1.9-0+deb10u1, 4.1.11-0+deb10u1, 4.3.6-0+deb11u1, 5.1.3-1, and 6.0-7.
5
How can I fix this vulnerability?
To fix this vulnerability, update to the appropriate version of FFmpeg as mentioned in the affected software section.