Name: CVE-2020-22042: Missing Release of Memory after Effective Lifetime
Creator: Rapid7
Published: 2021-06-01T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-22042, CWE-401, CVSS 6.5, EPSS 0.00928

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graphparser.c.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade ffmpegUpgrade ffmpeg4	Aug 22, 2024	Jun 1, 2021
Debian	—	Upgrade ffmpeg	Nov 4, 2022	Jun 1, 2021
Ffmpeg	—	Upgrade to FFmpeg version 4.3.3Upgrade to FFmpeg version 4.4	Jun 9, 2021	Jun 1, 2021
Suse	—	Upgrade libavutil55Upgrade libavcodec-develUpgrade libavcodec57-32bitUpgrade libavdevice57-32bitUpgrade libavutil-develUpgrade libswscale4-32bitUpgrade libswresample2Upgrade libavresample-develUpgrade libswresample-develUpgrade libswscale-develUpgrade libavformat-develUpgrade libavresample3-32bitUpgrade libswscale4Upgrade libavfilter-develUpgrade libavutil55-32bitUpgrade libpostproc54Upgrade ffmpeg-private-develUpgrade libavformat57-32bitUpgrade ffmpegUpgrade libavresample3Upgrade libavresample3-64bitUpgrade libpostproc-develUpgrade libavfilter6Upgrade libpostproc54-32bitUpgrade libavformat57Upgrade libavcodec57Upgrade libavdevice57Upgrade libswresample2-32bitUpgrade libavdevice-develUpgrade libavfilter6-32bit	Oct 7, 2021	Jun 1, 2021
Ubuntu	—	Upgrade libavcodec-extra57Upgrade libavformat57Upgrade libavfilter6Upgrade libavcodec58Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavformat-extra58Upgrade libavfilter-extra7Upgrade libavresample3Upgrade libavdevice57Upgrade ffmpeg (Ubuntu Pro)Upgrade libavdevice58Upgrade libswscale5Upgrade libswresample2Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libswresample3Upgrade ffmpegUpgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libpostproc55Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavcodec57Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter-extra6Upgrade libavresample4Upgrade libpostproc54Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavutil55Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavutil56Upgrade libswscale4Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavcodec-extra58Upgrade libavformat58Upgrade libavfilter7	Jun 9, 2022	Jun 1, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence