CVE-2020-22056: Medium severity FFmpeg FFmpeg vulnerability
Published Jun 2, 2021
·Updated
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the configinput function in afacrossover.c.
Affected Software
1 affected component
FFmpeg FFmpeg=4.2
Event History
Jun 2, 2021
CVE Published
via MITRE·05:55 PM
Data Sourced
via MITRE·05:55 PM
Description
Data Sourced
via OSV·06:15 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the vulnerability ID of this FFmpeg vulnerability?
The vulnerability ID of this FFmpeg vulnerability is CVE-2020-22056.
2
What is the severity rating of CVE-2020-22056?
CVE-2020-22056 has a severity rating of medium, with a value of 6.5 (out of 10).
3
What is the description of CVE-2020-22056?
CVE-2020-22056 is a Denial of Service vulnerability in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c.
4
Which software versions are affected by CVE-2020-22056?
FFmpeg 4.2 is affected by CVE-2020-22056.
5
Is there a fix available for CVE-2020-22056?
It is recommended to update FFmpeg to a version that includes the fix for CVE-2020-22056.