Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2020-22019

Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Service.

Related bugs and status

CVE-2020-22019 (Candidate) is related to these bugs:

Bug #1970674: New bug fix releases 3.4.11, 4.2.7 and 4.4.2

		In	Importance	Status
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu)	Undecided	Fix Released
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu Focal)	Undecided	Fix Released
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu Jammy)	Undecided	Fix Released
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu Impish)	Undecided	Fix Released
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu Bionic)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: https://trac.ffmpeg.or...
DEBIAN: DSA-4990