CVE-2020-35965 PUBLISHED

decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations.

EPSS 1.62% · 81.7th percentile

Risk Scores

EPSS Score
1.62%
81.7th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSffmpeg7:4.2.4-1ubuntu0.1, 7:4.2.2-1ubuntu1, 7:4.2.2-1build1
Ubuntu:Pro:16.04:LTSffmpeg7:2.8.4-1ubuntu2, 7:2.8.4-1ubuntu3, 7:2.8.4-1ubuntu4
Ubuntu:18.04:LTSffmpeg7:3.4.1-1build1, 7:3.4.2-1, 7:3.4.2-1build1

Timeline

References

Open in Interactive Console →