PT-2021-10719 · FFmpeg+4 · Ffmpeg+4

Published 2019-09-11 · Updated 2023-10-12 · CVE-2020-22040

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2

Description A Denial of Service issue exists due to a memory leak in the v frame alloc function in frame.c.

Recommendations For FFmpeg version 4.2, update to a version that fixes the memory leak in the v frame alloc function.

Exploit

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALT-PU-2019-2678

BDU:2025-12501

CVE-2020-22040

USN-5167-1

USN-6430-1

Affected Products

Alt Linux

Astra Linux

Ffmpeg

Linuxmint

Ubuntu

References · 51

• 🔥 https://trac.ffmpeg.org/ticket/8283 · Exploit
• https://ubuntu.com/security/CVE-2020-22049 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5167-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22021 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22044 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6430-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22020 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-22040 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6430-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22032 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22046 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-20892 · Vendor Advisory