CVE-2020-22051
First published: Wed Jun 02 2021(Updated: )
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| FFmpeg FFmpeg | =4.2 | |
| debian/ffmpeg | 7:4.3.7-0+deb11u1 7:4.3.8-0+deb11u1 7:5.1.6-0+deb12u1 7:7.0.2-3 7:7.1-3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=673fce6d40d9a594fb7a0ea17d296b7d3d9ea856
- https://trac.ffmpeg.org/ticket/8313
- https://launchpad.net/bugs/cve/CVE-2020-22051
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=673fce6d40d9a594fb7a0ea17d296b7d3d9ea856
- https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=673fce6d40d9a594fb7a0ea17d296b7d3d9ea856
- https://security-tracker.debian.org/tracker/CVE-2020-22051
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22051
- https://nvd.nist.gov/vuln/detail/CVE-2020-22051
- https://ubuntu.com/security/CVE-2020-22051
Frequently Asked Questions
What is the vulnerability ID for this Denial of Service vulnerability in FFmpeg 4.2?
The vulnerability ID for this Denial of Service vulnerability in FFmpeg 4.2 is CVE-2020-22051.
What is the description of the vulnerability?
The vulnerability is a memory leak in the filter_frame function in vf_tile.c.
Which versions of FFmpeg are affected by this vulnerability?
FFmpeg 4.2 and earlier versions are affected by this vulnerability.
How can I fix this vulnerability?
To fix this vulnerability, update FFmpeg to version 4.3 or later.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following references: [CVE-2020-22051](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22051), [FFmpeg Trac Ticket](https://trac.ffmpeg.org/ticket/8313), [FFmpeg Git Commit](http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=673fce6d40d9a594fb7a0ea17d296b7d3d9ea856).
- collector/launchpad-cve
- source/Launchpad
- agent/type
- agent/author
- agent/remedy
- agent/severity
- agent/weakness
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- agent/trending
- vendor/ffmpeg
- canonical/ffmpeg ffmpeg
- version/ffmpeg ffmpeg/4.2
- package-manager/debian