Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : FFmpeg vulnerabilities (USN-6430-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6430-1 advisory. It was discovered that FFmpeg did not properly handle certain inputs in vflagfun.c, resulting in a buffer overflow vulnerability...

UBUNTU-CVE-2020-22040

A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the vframealloc function in frame.c...

CVE-2020-22040

CVE-2020-22040 is a Denial of Service vulnerability in FFmpeg 4.2 caused by a memory leak in v_frame_alloc within frame.c. The issue is documented across multiple sources (NVD entry for CVE-2020-22040; Ubuntu USN-6430-1 and related Nessus/OpenVAS advisories) and is associated with FFmpeg’s memory...