CVE-2020-12284 PUBLISHED

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.

EPSS 6.44% · 91.0th percentile

Risk Scores

EPSS Score
6.44%
91.0th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSffmpeg0, 7:4.1.4-1build2, 7:4.2.1-2

Timeline

References

Open in Interactive Console →