CVE-2020-35964

trackheader in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing...

[ASA-202103-7] ffmpeg: arbitrary code execution

Arch Linux Security Advisory ASA-202103-7 ========================================= Severity: Medium Date : 2021-03-13 CVE-ID : CVE-2020-35964 Package : ffmpeg Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1649 Summary ======= The package ffmpeg before...

CVE-2020-35964

trackheader in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing...

CVE-2020-35964

FFmpeg 4.3.1 is affected by CVE-2020-35964 due to an out-of-bounds write in track_header (libavformat/vividas.c) caused by incorrect extradata packing. The issue is documented in multiple sources (OSV JLSEC-2025-110, NVD entry CVE-2020-35964). A fixed version exists: FFmpeg 4.3.2, which resolves ...

CVE-2020-35964

trackheader in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing...