Lucene search

GoogleOSV:CVE-2020-35964

HistoryJan 03, 2021 - 7:15 p.m.

CVE-2020-35964

2021-01-0319:15:11

Google

osv.dev

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%

JSON

track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing.

CPENameOperatorVersion
ffmpegeqn4.3-de
ffmpegeqn2.2-de
ffmpegeqN
ffmpegeqn1.3-de
ffmpegeqn2.1-de
ffmpegeqn3.4-de
ffmpegeqn2.7-de
ffmpegeqn4.1-de
ffmpegeqn3.2-de
ffmpegeqn3.3-de

Name	Operator	Version
ffmpeg	eq	n4.3-de
ffmpeg	eq	n2.2-de
ffmpeg	eq	N
ffmpeg	eq	n1.3-de
ffmpeg	eq	n2.1-de
ffmpeg	eq	n3.4-de
ffmpeg	eq	n2.7-de
ffmpeg	eq	n4.1-de
ffmpeg	eq	n3.2-de
ffmpeg	eq	n3.3-de

Rows per page:

1-10 of 261

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=26622

github.com/FFmpeg/FFmpeg/commit/27a99e2c7d450fef15594671eef4465c8a166bd7

security.gentoo.org/glsa/202105-24