FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video. A heap buffer overflow vulnerability exists in slicegetderivative in libavfilter/vfcolorconstancy.c in FFmpeg version 4.2. An attacker can exploit this vulnerability to cause memory corruption...

CVE-2020-22029: Out-of-bounds Write

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vfcolorconstancy.c: in slicegetderivative, which crossfadesamplesfltp, which might lead to memory corruption and other potential consequences...