Published: 04/01/2021 Updated: 05/11/2021

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

It exists that FFmpeg incorrectly handled file conversion to APNG format. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-21041)

Vulnerable Product	Search on Vulmon	Subscribe to Product
ffmpeg ffmpeg
debian debian linux 9.0
debian debian linux 10.0

Several security issues were fixed in FFmpeg ...

Debian Bug report logs - #979999 ffmpeg: CVE-2020-35965 Package: src:ffmpeg; Maintainer for src:ffmpeg is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 12 Jan 2021 18:12:02 UTC Severity: important Tags: security, upstream Found in ...

Debian Bug report logs - #980000 ffmpeg: CVE-2020-35964 Package: src:ffmpeg; Maintainer for src:ffmpeg is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 12 Jan 2021 18:15:01 UTC Severity: important Tags: security, upstream Found in ...

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed For the oldstable distribution (buster), these problems have been fixed in version 7:418-0+deb10u1 We recommend that you upgrade your ffm ...

decode_frame in libavcodec/exrc in FFmpeg 431 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations ...

CWE-787 https://github.com/FFmpeg/FFmpeg/commit/3e5959b3457f7f1856d997261e6ac672bba49e8b https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26532 https://github.com/FFmpeg/FFmpeg/commit/b0a8b40294ea212c1938348ff112ef1b9bf16bb3 https://lists.debian.org/debian-lts-announce/2021/01/msg00026.html https://security.gentoo.org/glsa/202105-24 https://www.debian.org/security/2021/dsa-4990 https://ubuntu.com/security/notices/USN-5472-1 https://nvd.nist.gov

CVE-2020-35965

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect