FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c,
which allows a remote malicious user to cause a Denial of Service.
(CVE-2020-20446)
FFmpeg 4.2 is affected by null pointer dereference passed as argument to
libavformat/aviobuf.c, which could cause a Denial of Service.
(CVE-2020-20450)
FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder,
which allows a remote malicious user to cause a Denial of Service.
(CVE-2020-20453)
Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend
in libavcodec/pngenc.c, which could let a remote malicious user cause a
Denial of Service. (CVE-2020-21041)
Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to
the out of bounds in libavformat/movenc.c, which could let a remote
malicious user obtain sensitive information, cause a Denial of Service, or
execute arbitrary code. (CVE-2020-22015)
Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in
libavfilter/vf_v...
- https://bugs.mageia.org/show_bug.cgi?id=29256
- https://ffmpeg.org//security.html
- https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html
-
-
-
- https://lists.debian.org/debian-security-announce/2021/msg00175.html
- https://www.cve.org/CVERecord?id=CVE-2020-20446
- https://www.cve.org/CVERecord?id=CVE-2020-20450
- https://www.cve.org/CVERecord?id=CVE-2020-20453
- https://www.cve.org/CVERecord?id=CVE-2020-21041
- https://www.cve.org/CVERecord?id=CVE-2020-22015
- https://www.cve.org/CVERecord?id=CVE-2020-22019
- https://www.cve.org/CVERecord?id=CVE-2020-22021
- https://www.cve.org/CVERecord?id=CVE-2020-22033
- https://www.cve.org/CVERecord?id=CVE-2020-22037
- https://www.cve.org/CVERecord?id=CVE-2020-22038
- https://www.cve.org/CVERecord?id=CVE-2020-22042
- https://www.cve.org/CVERecord?id=CVE-2021-38114
- https://www.cve.org/CVERecord?id=CVE-2021-38171
- https://www.cve.org/CVERecord?id=CVE-2021-38291
- 8/core/ffmpeg-4.3.3-3.mga8
- 8/tainted/ffmpeg-4.3.3-3.mga8.tainted
Get the latest Linux and open source security news straight to your inbox.