PT-2021-10547 · FFmpeg+1 · Ffmpeg+1

Published 2021-09-20 · Updated 2024-04-29 · CVE-2020-20894

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1

Description: A Buffer Overflow issue in the gaussian blur function within libavfilter/vf edgedetect.c may allow attackers to cause a Denial of Service or other unspecified impacts.

Recommendations: For Ffmpeg version 4.2.1, consider disabling the gaussian blur function as a temporary workaround until a patch is available.

Exploit

Related Identifiers

CVE-2020-20894

OPENSUSE-SU-2024_1468-1

SUSE-SU-2024:1468-1

SUSE-SU-2024_1468-1

Affected Products

Ffmpeg

Suse

References · 26

• 🔥 https://trac.ffmpeg.org/ticket/8260 · Exploit
• https://cve.org/CVERecord?id=CVE-2020-20894 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-20894 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-20894 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1468-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-20894 · Security Note
• https://suse.com/security/cve/CVE-2020-20898 · Note
• https://suse.com/security/cve/CVE-2023-49502 · Note
• https://suse.com/security/cve/CVE-2024-31578 · Note
• https://bugzilla.suse.com/1190731 · Note
• https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/ccf4ab8c9aca0aee66bcc2914031a9c97ac0eeb8 · Note
• https://suse.com/security/cve/CVE-2020-20901 · Note
• https://suse.com/security/cve/CVE-2020-20894 · Note
• https://suse.com/support/update/announcement/2024/suse-su-20241468-1 · Note
• https://bugzilla.suse.com/1190732 · Note