high8.8
CVE-2020-14212
FFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.c calls ff_dnn_load_model_native and a …
Impact
FFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.c calls ff_dnn_load_model_native and a certain index check is omitted.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ffmpeg | Ffmpeg | from 4.3 before 4.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://patchwork.ffmpeg.org/project/ffmpeg/list/?series=1463
- https://security.gentoo.org/glsa/202007-58
- https://trac.ffmpeg.org/ticket/8716
- https://patchwork.ffmpeg.org/project/ffmpeg/list/?series=1463
- https://security.gentoo.org/glsa/202007-58
- https://trac.ffmpeg.org/ticket/8716