CVE-2020-22038: Medium severity ffmpeg vulnerability
Published Jun 1, 2021
·Updated
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ffv4l2m2mcreatecontext function in v4l2m2m.c.
Affected Software
5 affected componentsFixes available
ubuntu/ffmpeg<7:3.4.11-0ubuntu0.1+
7:3.4.11-0ubuntu0.1+
ubuntu/ffmpeg<7:4.2.7-0ubuntu0.1+
7:4.2.7-0ubuntu0.1+
ubuntu/ffmpeg<4.4
4.4
debian/ffmpeg<=7:4.1.9-0+deb10u1, <=7:4.1.11-0+deb10u1, <=7:4.3.6-0+deb11u1
7:5.1.4-0+deb12u17:6.1.1-1
FFmpeg FFmpeg=4.2
Remediation
Event History
Jun 1, 2021
CVE Published
via Ubuntu·12:00 AM
CVE Published
via MITRE·07:25 PM
Data Sourced
via MITRE·07:25 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:45 PM
Description
Frequently Asked Questions
1
What is CVE-2020-22038?
CVE-2020-22038 is a Denial of Service vulnerability in FFmpeg 4.2.
2
How severe is CVE-2020-22038?
CVE-2020-22038 has a severity score of 6.5 (medium).
3
Which version of FFmpeg is affected by CVE-2020-22038?
FFmpeg version 4.2 is affected by CVE-2020-22038.
4
What is the impact of CVE-2020-22038?
CVE-2020-22038 can allow an attacker to cause a Denial of Service by exploiting a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c.
5
Are there any known remedies for CVE-2020-22038?
Remedies include updating to Ubuntu versions 4.4, 7:3.4.11-0ubuntu0.1+, 7:4.2.7-0ubuntu0.1+, or Debian versions 7:5.1.3-1, 7:6.0-7.