Name: CVE-2020-20891: Buffer Copy without Checking Size of Input
Creator: Rapid7
Published: 2021-09-20T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-20891, CWE-120, CVSS 8.8, EPSS 0.00329

Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.

CVSS Details

CVSS 3.1 Base Score: 8.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade ffmpeg	Aug 17, 2022	Sep 20, 2021
Ffmpeg	—	Upgrade to FFmpeg version 4.2.6Upgrade to FFmpeg version 3.2.17Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 3.4.10Upgrade to FFmpeg version 4.1.9	Sep 27, 2021	Sep 20, 2021
Suse	—	Upgrade libavresample3-32bitUpgrade ffmpeg-private-develUpgrade libavfilter6Upgrade libavutil55-32bitUpgrade libavformat57Upgrade libavformat57-32bitUpgrade libavcodec57Upgrade libavdevice-develUpgrade libpostproc-develUpgrade ffmpegUpgrade libpostproc54-32bitUpgrade libavresample3Upgrade libavdevice57Upgrade libavdevice57-32bitUpgrade libavresample3-64bitUpgrade libavcodec57-32bitUpgrade libswscale-develUpgrade libavresample-develUpgrade libswscale4-32bitUpgrade libavutil-develUpgrade libpostproc54Upgrade libavformat-develUpgrade libswresample2-32bitUpgrade libavfilter-develUpgrade libswscale4Upgrade libavfilter6-32bitUpgrade libavutil55Upgrade libavcodec-develUpgrade libswresample2Upgrade libswresample-devel	Oct 27, 2021	Sep 20, 2021

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence