CVE-2020-22029

2021-05-2718:15:07

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.4%

JSON

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, which might lead to memory corruption and other potential consequences.

CPENameOperatorVersion
ffmpeg.giteqn2.5-de
ffmpeg.giteqN
ffmpeg.giteqn2.4-de
ffmpeg.giteqn2.7-de
ffmpeg.giteqn3.4-de
ffmpeg.giteqn3.3-de
ffmpeg.giteqn3.5-de
ffmpeg.giteqn2.1-de
ffmpeg.giteqn0.8
ffmpeg.giteqn2.3-de

Name	Operator	Version
ffmpeg.git	eq	n2.5-de
ffmpeg.git	eq	N
ffmpeg.git	eq	n2.4-de
ffmpeg.git	eq	n2.7-de
ffmpeg.git	eq	n3.4-de
ffmpeg.git	eq	n3.3-de
ffmpeg.git	eq	n3.5-de
ffmpeg.git	eq	n2.1-de
ffmpeg.git	eq	n0.8
ffmpeg.git	eq	n2.3-de