high7.8
CVE-2020-24995
Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local).
Impact
Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ffmpeg | Ffmpeg | Version 3.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d6f293353c94c7ce200f6e0975ae3de49787f91f
- https://trac.ffmpeg.org/ticket/8845
- https://trac.ffmpeg.org/ticket/8859
- https://trac.ffmpeg.org/ticket/8860
- http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d6f293353c94c7ce200f6e0975ae3de49787f91f
- https://trac.ffmpeg.org/ticket/8845
- https://trac.ffmpeg.org/ticket/8859
- https://trac.ffmpeg.org/ticket/8860