PT-2020-5591 · FFmpeg+1 · Ffmpeg+1
Published
2020-10-24
·
Updated
2026-02-06
·
CVE-2020-35964
CVSS v2.0
7.1
High
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
FFmpeg version 4.3.1
Description
The issue is related to an out-of-bounds write in the
track header function of the libavformat library in FFmpeg, caused by incorrect extradata packing. This can potentially allow a remote attacker to cause a denial of service.Recommendations
For FFmpeg version 4.3.1, consider updating to a newer version that addresses the out-of-bounds write issue in the
track header function. As a temporary workaround, consider restricting the use of the libavformat library until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Ffmpeg