CVE-2020-22049 PUBLISHED

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c.

EPSS 1.55% · 81.3th percentile

Risk Scores

EPSS Score
1.55%
81.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSffmpeg7:2.7.2-1build1, 7:2.8.1-1ubuntu1, 7:2.8.3-1
Ubuntu:20.04:LTSffmpeg7:4.1.4-1build2, 7:4.2.1-2ubuntu1, 7:4.2.2-1build1
Ubuntu:18.04:LTSffmpeg7:3.4.2-1build1, 7:3.4.2-2, 7:3.4.4-0ubuntu0.18.04.1

Timeline

References

Open in Interactive Console →