vulnerability

Ubuntu: (Multiple Advisories) (CVE-2020-21697): FFmpeg vulnerabilities

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Aug 10, 2021
Added
Jun 9, 2022
Modified
Apr 16, 2026

Description

A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file.

Solutions

ubuntu-pro-upgrade-ffmpegubuntu-pro-upgrade-libavcodec-extraubuntu-pro-upgrade-libavcodec-ffmpeg-extra56ubuntu-pro-upgrade-libavcodec-ffmpeg56ubuntu-pro-upgrade-libavdevice-ffmpeg56ubuntu-pro-upgrade-libavfilter-ffmpeg5ubuntu-pro-upgrade-libavformat-ffmpeg56ubuntu-pro-upgrade-libavresample-ffmpeg2ubuntu-pro-upgrade-libavutil-ffmpeg54ubuntu-pro-upgrade-libpostproc-ffmpeg53ubuntu-pro-upgrade-libswresample-ffmpeg1ubuntu-pro-upgrade-libswscale-ffmpeg3ubuntu-upgrade-ffmpegubuntu-upgrade-libavcodec-extra57ubuntu-upgrade-libavcodec-extra58ubuntu-upgrade-libavcodec57ubuntu-upgrade-libavcodec58ubuntu-upgrade-libavdevice57ubuntu-upgrade-libavdevice58ubuntu-upgrade-libavfilter-extra6ubuntu-upgrade-libavfilter-extra7ubuntu-upgrade-libavfilter6ubuntu-upgrade-libavfilter7ubuntu-upgrade-libavformat57ubuntu-upgrade-libavformat58ubuntu-upgrade-libavresample3ubuntu-upgrade-libavresample4ubuntu-upgrade-libavutil55ubuntu-upgrade-libavutil56ubuntu-upgrade-libpostproc54ubuntu-upgrade-libpostproc55ubuntu-upgrade-libswresample2ubuntu-upgrade-libswresample3ubuntu-upgrade-libswscale4ubuntu-upgrade-libswscale5
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.