PT-2019-6073 · FFmpeg+3 · Ffmpeg+3
Published
2019-09-11
·
Updated
2023-10-12
·
CVE-2020-22024
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
FFmpeg version 4.2
Description
The issue is related to a Buffer Overflow in the
lagfun frame16 function within the libavfilter/vf lagfun.c component of the FFmpeg library. This could allow a remote malicious user to cause Denial of Service. The vulnerability is associated with a buffer overflow in memory.Recommendations
For FFmpeg version 4.2, consider disabling the
lagfun frame16 function as a temporary workaround until a patch is available. Restrict access to the libavfilter/vf lagfun.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Ffmpeg
Linuxmint
Ubuntu