Name: CVE-2020-22037: Missing Release of Memory after Effective Lifetime
Creator: Rapid7
Published: 2021-06-01T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-22037, CWE-401, CVSS 6.5, EPSS 0.01599

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade ffmpegUpgrade ffmpeg4	Aug 22, 2024	Jun 1, 2021
Debian	—	Upgrade ffmpeg	Nov 29, 2021	Jun 1, 2021
Ffmpeg	—	Upgrade to FFmpeg version 4.3	Jun 9, 2021	Jun 1, 2021
Suse	—	Upgrade libswscale4Upgrade libpostproc-develUpgrade libpostproc54Upgrade libavcodec-develUpgrade libavfilter6-32bitUpgrade libavfilter6Upgrade libavutil-develUpgrade libavresample3-64bitUpgrade libswresample-develUpgrade libswresample2-32bitUpgrade libavformat57-32bitUpgrade libavutil55Upgrade libavcodec57-32bitUpgrade libavdevice-develUpgrade libavdevice57-32bitUpgrade libswscale4-32bitUpgrade libavresample-develUpgrade libavcodec57Upgrade ffmpegUpgrade libavformat57Upgrade libavfilter-develUpgrade libswscale-develUpgrade libavresample3Upgrade libavutil55-32bitUpgrade libavresample3-32bitUpgrade libpostproc54-32bitUpgrade libswresample2Upgrade libavformat-develUpgrade libavdevice57Upgrade ffmpeg-private-devel	Oct 27, 2021	Jun 1, 2021
Ubuntu	—	Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavutil55Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavutil56Upgrade libpostproc54Upgrade ffmpegUpgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavformat58Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libswresample2Upgrade libavdevice58Upgrade libavcodec-extra58Upgrade libavfilter-extra6Upgrade libswscale4Upgrade ffmpeg (Ubuntu Pro)Upgrade libavresample4Upgrade libavdevice57Upgrade libavfilter-extra7Upgrade libavcodec58Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavformat-extra58Upgrade libavfilter7Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libswresample3Upgrade libavcodec-extra57Upgrade libavresample3Upgrade libpostproc55Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavcodec57Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavfilter6Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libswscale5Upgrade libavformat57	Jun 9, 2022	Jun 1, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence