CVE-2020-22051
published 2021-06-02CVE-2020-22051: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c.
PriorityP423medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
1.04%
60.5th percentile
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | ffmpeg | < ffmpeg 7:4.3-2 (bookworm) | ffmpeg 7:4.3-2 (bookworm) |
| ffmpeg | ffmpeg | — | — |
| ffmpeg | ffmpeg | >= 0 < 7:4.3-2 | 7:4.3-2 |
| ffmpeg | ffmpeg | >= 0 < 7:4.3-2 | 7:4.3-2 |
| ffmpeg | ffmpeg | >= 0 < 7:4.3-2 | 7:4.3-2 |
| ffmpeg | ffmpeg | >= 0 < 7:4.3-2 | 7:4.3-2 |
| ffmpeg | ffmpeg | >= 0 < 7:2.8.17-0ubuntu0.1+esm6 | 7:2.8.17-0ubuntu0.1+esm6 |
| ffmpeg | ffmpeg | >= 0 < 7:3.4.11-0ubuntu0.1+esm2 | 7:3.4.11-0ubuntu0.1+esm2 |
| ffmpeg | ffmpeg | >= 0 < 7:4.2.7-0ubuntu0.1+esm2 | 7:4.2.7-0ubuntu0.1+esm2 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv6.5MEDIUM
vendor_debian6.5LOW
vendor_ubuntu6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
FFmpeg vulnerabilities
vendor_ubuntu·2023-10-12·CVSS 6.5
CVE-2020-22040 [MEDIUM] FFmpeg vulnerabilities
Title: FFmpeg vulnerabilities
Summary: Several security issues were fixed in FFmpeg.
It was discovered that FFmpeg did not properly handle certain inputs in
vf_lagfun.c, resulting in a buffer overflow vulnerability. An attacker
could possibly use this issue to cause a denial of service via application
crash. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-22024)
It was discovered that FFmpeg incorrectly managed memory in avienc.c,
resulting in a memory leak. An attacker could possibly use this issue
to cause a denial of service via application crash. (CVE-2020-22039)
It was discovered that FFmpeg incorrectly handled certain files due to a
memory leak in frame.c. An attacker could possibly use this issue to cause
a denial of service via application crash. This issue affected
Ubuntu
Debian
CVE-2020-22051: ffmpeg - A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in t...
vendor_debian·2020·CVSS 6.5
CVE-2020-22051 [MEDIUM] CVE-2020-22051: ffmpeg - A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in t...
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c.
Scope: local
bookworm: resolved (fixed in 7:4.3-2)
bullseye: resolved (fixed in 7:4.3-2)
forky: resolved (fixed in 7:4.3-2)
sid: resolved (fixed in 7:4.3-2)
trixie: resolved (fixed in 7:4.3-2)
OSV
ffmpeg vulnerabilities
osv·2023-10-12·CVSS 6.5
CVE-2020-22024 [MEDIUM] ffmpeg vulnerabilities
ffmpeg vulnerabilities
It was discovered that FFmpeg did not properly handle certain inputs in
vf_lagfun.c, resulting in a buffer overflow vulnerability. An attacker
could possibly use this issue to cause a denial of service via application
crash. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-22024)
It was discovered that FFmpeg incorrectly managed memory in avienc.c,
resulting in a memory leak. An attacker could possibly use this issue
to cause a denial of service via application crash. (CVE-2020-22039)
It was discovered that FFmpeg incorrectly handled certain files due to a
memory leak in frame.c. An attacker could possibly use this issue to cause
a denial of service via application crash. This issue affected
Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-22040)
It was disco
GHSA
GHSA-8rfm-2pfj-5pq2: A Denial of Service vulnerability exists in FFmpeg 4
ghsa_unreviewed·2022-05-24
CVE-2020-22051 [MEDIUM] CWE-401 GHSA-8rfm-2pfj-5pq2: A Denial of Service vulnerability exists in FFmpeg 4
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c.
OSV
CVE-2020-22051: A Denial of Service vulnerability exists in FFmpeg 4
osv·2021-06-02·CVSS 6.5
CVE-2020-22051 [MEDIUM] CVE-2020-22051: A Denial of Service vulnerability exists in FFmpeg 4
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-06-02
Published