CVE-2020-22024
published 2021-05-26CVE-2020-22024: Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of…
PriorityP425medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
1.03%
60.2th percentile
Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of Service.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | ffmpeg | < ffmpeg 7:4.3-2 (bookworm) | ffmpeg 7:4.3-2 (bookworm) |
| ffmpeg | ffmpeg | — | — |
| ffmpeg | ffmpeg | >= 0 < 7:4.3-2 | 7:4.3-2 |
| ffmpeg | ffmpeg | >= 0 < 7:4.3-2 | 7:4.3-2 |
| ffmpeg | ffmpeg | >= 0 < 7:4.3-2 | 7:4.3-2 |
| ffmpeg | ffmpeg | >= 0 < 7:4.3-2 | 7:4.3-2 |
| ffmpeg | ffmpeg | >= 0 < 7:2.8.17-0ubuntu0.1+esm6 | 7:2.8.17-0ubuntu0.1+esm6 |
| ffmpeg | ffmpeg | >= 0 < 7:3.4.11-0ubuntu0.1+esm2 | 7:3.4.11-0ubuntu0.1+esm2 |
| ffmpeg | ffmpeg | >= 0 < 7:4.2.7-0ubuntu0.1+esm2 | 7:4.2.7-0ubuntu0.1+esm2 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv6.5MEDIUM
vendor_debian6.5MEDIUM
vendor_ubuntu6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
ffmpeg vulnerabilities
osv·2023-10-12·CVSS 6.5
CVE-2020-22024 [MEDIUM] ffmpeg vulnerabilities
ffmpeg vulnerabilities
It was discovered that FFmpeg did not properly handle certain inputs in
vf_lagfun.c, resulting in a buffer overflow vulnerability. An attacker
could possibly use this issue to cause a denial of service via application
crash. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-22024)
It was discovered that FFmpeg incorrectly managed memory in avienc.c,
resulting in a memory leak. An attacker could possibly use this issue
to cause a denial of service via application crash. (CVE-2020-22039)
It was discovered that FFmpeg incorrectly handled certain files due to a
memory leak in frame.c. An attacker could possibly use this issue to cause
a denial of service via application crash. This issue affected
Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-22040)
It was disco
GHSA
GHSA-ghvv-53f4-f6ff: Buffer Overflow vulnerability in FFmpeg 4
ghsa_unreviewed·2022-05-24
CVE-2020-22024 [MEDIUM] CWE-120 GHSA-ghvv-53f4-f6ff: Buffer Overflow vulnerability in FFmpeg 4
Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of Service.
OSV
CVE-2020-22024: Buffer Overflow vulnerability in FFmpeg 4
osv·2021-05-26·CVSS 6.5
CVE-2020-22024 [MEDIUM] CVE-2020-22024: Buffer Overflow vulnerability in FFmpeg 4
Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of Service.
Ubuntu
FFmpeg vulnerabilities
vendor_ubuntu·2023-10-12·CVSS 6.5
CVE-2020-22040 [MEDIUM] FFmpeg vulnerabilities
Title: FFmpeg vulnerabilities
Summary: Several security issues were fixed in FFmpeg.
It was discovered that FFmpeg did not properly handle certain inputs in
vf_lagfun.c, resulting in a buffer overflow vulnerability. An attacker
could possibly use this issue to cause a denial of service via application
crash. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-22024)
It was discovered that FFmpeg incorrectly managed memory in avienc.c,
resulting in a memory leak. An attacker could possibly use this issue
to cause a denial of service via application crash. (CVE-2020-22039)
It was discovered that FFmpeg incorrectly handled certain files due to a
memory leak in frame.c. An attacker could possibly use this issue to cause
a denial of service via application crash. This issue affected
Ubuntu
Debian
CVE-2020-22024: ffmpeg - Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in li...
vendor_debian·2020·CVSS 6.5
CVE-2020-22024 [MEDIUM] CVE-2020-22024: ffmpeg - Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in li...
Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of Service.
Scope: local
bookworm: resolved (fixed in 7:4.3-2)
bullseye: resolved (fixed in 7:4.3-2)
forky: resolved (fixed in 7:4.3-2)
sid: resolved (fixed in 7:4.3-2)
trixie: resolved (fixed in 7:4.3-2)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-05-26
Published