Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-13904
HistoryJun 07, 2020 - 12:00 a.m.

CVE-2020-13904

2020-06-0700:00:00
ubuntu.com
ubuntu.com
11

0.002 Low

EPSS

Percentile

52.5%

FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in
an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer,
and later that pointer is accessed in av_probe_input_format3 in
libavformat/format.c.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchffmpeg< 7:3.4.8-0ubuntu0.2UNKNOWN
ubuntu20.04noarchffmpeg< 7:4.2.4-1ubuntu0.1UNKNOWN
ubuntu16.04noarchffmpeg< 7:2.8.17-0ubuntu0.1UNKNOWN