CVE-2020-22037: Medium severity FFmpeg FFmpeg vulnerability
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodecalloccontext3 at options.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:4.3.7-0+deb11u1Fixed in 7:4.3.8-0+deb11u1Fixed in 7:5.1.6-0+deb12u1Fixed in 7:7.0.2-3Fixed in 7:7.1-3 - Upgrade
Upgrade
alpine/ffmpegto a version that resolves this vulnerability.Fixed in 4.3.3-r0 - Upgrade
Upgrade
alpine/ffmpegto a version that resolves this vulnerability.Fixed in 4.4.1-r0 - Upgrade
Upgrade
alpine/ffmpeg4to a version that resolves this vulnerability.Fixed in 4.4.1-r0
Event History
Frequently Asked Questions
What is CVE-2020-22037?
CVE-2020-22037 is a Denial of Service vulnerability in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.
How does the vulnerability in FFmpeg 4.2 affect me?
The vulnerability in FFmpeg 4.2 can be exploited to cause a Denial of Service attack, potentially affecting the availability of your system.
Which versions of FFmpeg are affected by CVE-2020-22037?
FFmpeg versions 4.2 are affected by CVE-2020-22037.
How do I fix the vulnerability in FFmpeg 4.2?
To fix the vulnerability, you should update your FFmpeg installation to version 4.4.1 or later.
Where can I find more information about CVE-2020-22037?
You can find more information about CVE-2020-22037 on the CVE website at [CVE-2020-22037](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22037).