PT-2021-10491 · FFmpeg+3 · Ffmpeg+3

Published 2019-09-11 · Updated 2026-02-06 · CVE-2020-20450

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2

Description: The issue is related to a null pointer dereference passed as an argument to libavformat/aviobuf.c, which could cause a Denial of Service.

Recommendations: For FFmpeg version 4.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2019-2678

ALT-PU-2021-3508

ALT-PU-2021-3575

CLEANSTART-2026-EZ98723

CLEANSTART-2026-PS82605

CLEANSTART-2026-XE32069

CVE-2020-20450

DSA-4998-1

MGASA-2021-0495

USN-5472-1

Affected Products

Alt Linux

Ffmpeg

Linuxmint

Ubuntu

References · 181

• https://ubuntu.com/security/CVE-2020-22021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30123 · Security Note
• https://ubuntu.com/security/CVE-2020-22017 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22020 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24020 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-1999014 · Security Note
• https://ubuntu.com/security/CVE-2020-22034 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-20450 · Security Note
• https://ubuntu.com/security/CVE-2020-22025 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10001 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-7757 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-12284 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-38291 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-13300 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-9721 · Security Note