Name: CVE-2020-22020: Buffer Copy without Checking Size of Input
Creator: Rapid7
Published: 2021-05-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-22020, CWE-120, CVSS 6.5, EPSS 0.01516

Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Denial of Service.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade ffmpeg	Aug 16, 2021	May 26, 2021
Ffmpeg	—	Upgrade to FFmpeg version 4.2.7Upgrade to FFmpeg version 3.4.11Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 4.1.8Upgrade to FFmpeg version 3.2.18Upgrade to FFmpeg version 2.8.20	Jun 7, 2021	May 26, 2021
Suse	—	Upgrade libavcodec57-32bitUpgrade libpostproc54-32bitUpgrade libswscale4-32bitUpgrade libswscale4Upgrade libswresample-develUpgrade libavformat-develUpgrade libavutil-develUpgrade libpostproc54Upgrade libavfilter6-32bitUpgrade libavcodec-develUpgrade libswresample2Upgrade libavdevice-develUpgrade libavresample-develUpgrade libavfilter-develUpgrade ffmpeg-private-develUpgrade libavcodec57Upgrade ffmpegUpgrade libavutil55-32bitUpgrade libavdevice57-32bitUpgrade libavutil55Upgrade libswresample2-32bitUpgrade libavresample3-32bitUpgrade libpostproc-develUpgrade libavformat57-32bitUpgrade libswscale-develUpgrade libavfilter6Upgrade libavformat57Upgrade libavdevice57Upgrade libavresample3	Jul 15, 2021	May 26, 2021
Ubuntu	—	Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavcodec-extra58Upgrade libavutil56Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavcodec58Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavformat-extra58Upgrade libpostproc54Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavfilter6Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavfilter7Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec-extra57Upgrade libswresample2Upgrade libavdevice57Upgrade libavdevice58Upgrade ffmpegUpgrade libavcodec57Upgrade ffmpeg (Ubuntu Pro)Upgrade libswscale4Upgrade libavutil55Upgrade libavresample4Upgrade libavformat57Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libswresample3Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter-extra6Upgrade libavfilter-extra7Upgrade libavresample3Upgrade libpostproc55Upgrade libswscale5Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavformat58Upgrade libswresample-ffmpeg1 (Ubuntu Pro)	Jun 9, 2022	May 26, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence