Name: CVE-2020-22028: Buffer Copy without Checking Size of Input
Creator: Rapid7
Published: 2021-05-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-22028, CWE-120, CVSS 6.5, EPSS 0.01709

Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade ffmpeg	Aug 16, 2021	May 26, 2021
Ffmpeg	—	Upgrade to FFmpeg version 3.2.18Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 4.1.8Upgrade to FFmpeg version 4.2.7Upgrade to FFmpeg version 3.4.11	Jun 7, 2021	May 26, 2021
Ubuntu	—	Upgrade libavresample4Upgrade libavfilter-extra6Upgrade libavdevice58Upgrade libavutil56Upgrade ffmpegUpgrade libavcodec58Upgrade libavdevice57Upgrade libswresample2Upgrade libavformat58Upgrade libavcodec57Upgrade libswresample3Upgrade libavutil55Upgrade libswscale4Upgrade libavcodec-extra58Upgrade libpostproc54Upgrade libavresample3Upgrade libavfilter6Upgrade libswscale5Upgrade libavfilter7Upgrade libavcodec-extra57Upgrade libavformat57Upgrade libpostproc55Upgrade libavformat-extra58Upgrade libavfilter-extra7	Jun 9, 2022	May 26, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence