Vulnetix
Try Vulnetix Request Demo
CVE-2020-14212 REJECTED

FFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.c calls ff_dnn_load_model_native and a certain index check is omitted.

EPSS 0.64% · 70.3th percentile

Risk Scores

EPSS Score
0.64%
70.3th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSqtwebengine-opensource-src0, 5.9.1+dfsg-4, 5.9.1+dfsg-4ubuntu1
Ubuntu:20.04:LTSqtwebengine-opensource-src0, 5.12.4+dfsg-1ubuntu1, 5.12.4+dfsg-1ubuntu3
Ubuntu:25.10qtwebengine-opensource-src5.15.19+dfsg2-1, 0, 5.15.18+dfsg-2
Ubuntu:22.04:LTSqtwebengine-opensource-src5.15.8+dfsg-1build1, 5.15.8+dfsg-1build2, 5.15.8+dfsg-2
Ubuntu:24.04:LTSqtwebengine-opensource-src5.15.16+dfsg-1ubuntu2, 5.15.16+dfsg-1ubuntu4, 5.15.16+dfsg-3

Timeline

References

Open in Interactive Console →