CVE-2020-22023 — Vulnetix

CVE-2020-22023 PUBLISHED

A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, which might lead to memory corruption and other potential consequences.

EPSS 0.97% · 77.0th percentile

Risk Scores

EPSS Score

0.97%

77.0th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:18.04:LTS	ffmpeg	7:3.3.4-2, 7:3.3.4-2build3, 7:3.4-2ubuntu2
Ubuntu:20.04:LTS	ffmpeg	0, 7:4.1.4-1build2, 7:4.2.1-2

Exploit Intelligence

https://trac.ffmpeg.org/ticket/8244 (circl)
[debian-lts-announce] 20210815 [SECURITY] [DLA 2742-1] ffmpeg security update (circl)
DSA-4990 (circl)

Timeline

May 27, 2021 CVE Published
May 28, 2021 EPSS Score
Jun 3, 2021 EPSS Score
Jul 30, 2021 EPSS Score
Sep 29, 2021 EPSS Score
Nov 30, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Jun 1, 2022 EPSS Score
Aug 2, 2022 EPSS Score
Dec 3, 2022 EPSS Score

References

https://ubuntu.com/security/CVE-2020-22023 third-party-advisory
https://trac.ffmpeg.org/ticket/8244 third-party-advisory
https://ubuntu.com/security/notices/USN-5472-1 vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2020-22023 third-party-advisory

Open in Interactive Console →