CVE-2020-12284

Published: Apr 28, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/FFmpeg/FFmpeg/commit/1812352d767ccf5431aa440123e2e260a4db2726

x_refsource_MISC

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19734

x_refsource_MISC

DSA-4722

vendor-advisory

x_refsource_DEBIAN

USN-4431-1

vendor-advisory

x_refsource_UBUNTU

GLSA-202007-58

vendor-advisory

x_refsource_GENTOO

https://github.com/FFmpeg/FFmpeg/commit/a3a3730b5456ca00587455004d40c047f7b20a99

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-12284

Description

Affected Products

References