PT-2021-4534 · FFmpeg+5 · Ffmpeg+5
Published
2019-09-11
·
Updated
2026-02-06
·
CVE-2020-22015
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
FFmpeg version 4.2
Description
The issue is related to a buffer overflow in the mov write video tag component of the FFmpeg library, which can be exploited by a remote attacker to gain access to sensitive information, compromise data integrity, and cause a denial of service. The vulnerability is due to an out-of-bounds condition in libavformat/movenc.c. A remote malicious user could obtain sensitive information, cause a denial of service, or potentially execute arbitrary code.
Recommendations
For FFmpeg version 4.2, consider updating to a newer version that includes a fix for the buffer overflow vulnerability in the mov write video tag component. As a temporary workaround, consider restricting access to the mov write video tag function to minimize the risk of exploitation.
Exploit
Fix
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Ffmpeg
Linuxmint
Suse
Ubuntu