CVE-2020-35965

Published: Jan 4, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/FFmpeg/FFmpeg/commit/b0a8b40294ea212c1938348ff112ef1b9bf16bb3

x_refsource_MISC

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26532

x_refsource_MISC

https://github.com/FFmpeg/FFmpeg/commit/3e5959b3457f7f1856d997261e6ac672bba49e8b

x_refsource_MISC

[debian-lts-announce] 20210131 [SECURITY] [DLA 2537-1] ffmpeg security update

mailing-list

x_refsource_MLIST

GLSA-202105-24

vendor-advisory

x_refsource_GENTOO

DSA-4990

vendor-advisory

x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-35965

Description

Affected Products

References