CVE-2020-21688

2021-08-1021:15:07

Google

osv.dev

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.6%

JSON

A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.

CPENameOperatorVersion
ffmpeg.giteqn2.5-de
ffmpeg.giteqN
ffmpeg.giteqn2.4-de
ffmpeg.giteqn2.7-de
ffmpeg.giteqn3.4-de
ffmpeg.giteqn3.3-de
ffmpeg.giteqn3.5-de
ffmpeg.giteqn2.1-de
ffmpeg.giteqn0.8
ffmpeg.giteqn2.3-de

Name	Operator	Version
ffmpeg.git	eq	n2.5-de
ffmpeg.git	eq	N
ffmpeg.git	eq	n2.4-de
ffmpeg.git	eq	n2.7-de
ffmpeg.git	eq	n3.4-de
ffmpeg.git	eq	n3.3-de
ffmpeg.git	eq	n3.5-de
ffmpeg.git	eq	n2.1-de
ffmpeg.git	eq	n0.8
ffmpeg.git	eq	n2.3-de