CVE-2020-13904

FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parseplaylist in libavformat/hls.c frees a pointer, and later that pointer is accessed in avprobeinputformat3 in libavformat/format.c...

The vulnerability of the parse_playlist function in the libavformat library of the Ffmpeg multimedia environment allows a attacker to cause a service failure.

The vulnerability of the parseplaylist function in the libavformat library of the Ffmpeg multimedia environment is related to its use after deallocation. Exploiting this vulnerability could allow a malicious actor to cause service failure...