OESA-2026-2596 ffmpeg security update

🗓️ 05 Jun 2026 11:11:32Reported by GoogleType

osv🔗 osv.dev👁 8 Views

FFmpeg 4.2 has heap buffer overflows in libavfilter causing memory corruption and DoS.

Reporter	Title	Published	Views	Family All 147
AstraLinux	Astra Linux – Vulnerability in ffmpeg	14 Sep 202612:01	–	astralinux
AstraLinux	Astra Linux – Vulnerability in ffmpeg	14 Sep 202612:01	–	astralinux
AstraLinux	Astra Linux – Vulnerability in ffmpeg	14 Sep 202612:01	–	astralinux
AstraLinux	Astra Linux – Vulnerability in ffmpeg	14 Sep 202612:01	–	astralinux
AstraLinux	Astra Linux – Vulnerability in ffmpeg	14 Sep 202612:01	–	astralinux
BDU FSTEC	The vulnerability of the crossfade_samples_fltp function in the libavfilter/af_afade.c component of the FFmpeg multimedia library allows a attacker to compromise the integrity, accessibility, and confidentiality of information.	27 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the gaussianblur component in the Ffmpeg library, which is related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.	27 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ff_fill_rectangle function in the multimedia library Ffmpeg, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.	17 Jan 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `slice_get_derivative` function in the Ffmpeg multimedia library, related to writing beyond buffer boundaries, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.	17 Jan 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the fftools/cmdutils.c component in the FFmpeg multimedia library allows a hacker to cause a service failure.	14 Nov 202300:00	–	bdu_fstec

Source	Link
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-20451
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-22017
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-22025
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-22029
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-22030

18 Aug 2026 01:20Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.18.8

EPSS0.01849

FFmpeg Buffer Overflow Heap Overflow libavfilter Memory Corruption Denial of Service CVE-2020-22030