USN-5472-1 — ffmpeg vulnerabilities

Summary

It was discovered that FFmpeg would attempt to divide by zero when using Linear
Predictive Coding (LPC) or AAC codecs. An attacker could possibly use this
issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS and Ubuntu 21.10. (CVE-2020-20445, CVE-2020-20446,
CVE-2020-20453)

It was discovered that FFmpeg incorrectly handled certain input. An attacker
could possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 20.04 LTS. (CVE-2020-20450)

It was discovered that FFmpeg incorrectly handled file conversion to APNG
format. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
(CVE-2020-21041)

It was discovered that FFmpeg incorrectly handled remuxing RTP-hint tracks.
A remote attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
(CVE-2020-21688)

It was discovered that FFmpeg incorrectly handled certain specially crafted
AVI files. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
(CVE-2020-21697)

It was discovered that FFmpeg incorrectly handled writing MOV video tags. An
attacker could possibly use this issue to cause a denial of service, obtain
sensitive information or execute arbitrary code. This issue only affected
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 21.10. (CVE-2020-22015)

It was discovered that FFmpeg incorrectly handled writing MOV files. An
attacker could possibly use this issue to cause a denial of service or other
unspecified impact. This issue affected only Ubuntu 18.04 LTS. (CVE-2020-22016)

It was discovered that FFmpeg incorrectly handled memory when using certain
filters. An attacker could possibly use this issue to cause a denial of service
or other unspecified impact. This issue only affected Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS. (CVE-2020-22017, CVE-2020-22020, CVE-2020-22022,
CVE-2020-22023, CVE-2022-22025, CVE-2020-22026, CVE-2020-22028, CVE-2020-22031,
CVE-2020-22032, CVE-2020-22034, CVE-2020-22036, CVE-2020-22042)

It was discovered that FFmpeg incorrectly handled memory when using certain
filters. An attacker could possibly use this issue to cause a denial of service
or other unspecified impact. This issue only affected Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS and Ubuntu 21.10. (CVE-2020-22019, CVE-2020-22021,
CVE-2020-22033)

It was discovered that FFmpeg incorrectly handled certain specially crafted
JPEG files. An attacker could possibly use this issue to obtain sensitive
information. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and
Ubuntu 21.10. (CVE-2020-22037)

It was discovered that FFmpeg incorrectly performed calculations in EXR codec.
An attacker could possibly use this issue to cause a denial of service. This
issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-35965)

It was discovered that FFmpeg did not verify return values of functions
init_vlc and init_get_bits. An attacker could possibly use this issue to cause
a denial of service or other unspecified impact. This issue only affected
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 21.10. (CVE-2021-38114,
CVE-2021-38171)

It was discovered that FFmpeg incorrectly handled certain specially crafted
files. An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 21.10 and Ubuntu 22.04 LTS. (CVE-2022-1475)

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	ffmpeg	7:3.4.11-0ubuntu0.1
Ubuntu · 20.04 LTS 20.04:LTS	ffmpeg	7:4.2.7-0ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS	ffmpeg	7:4.4.2-0ubuntu0.22.04.1

Vulnerabilities 34

Unscored —

CVE-2020-20445

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a …

ffmpeg ffmpeg Debian Ubuntu

May 25, 2021
Unscored —

CVE-2020-20446

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause…

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

May 25, 2021
Unscored —

CVE-2020-20450

FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Den…

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

May 25, 2021
Unscored —

CVE-2020-20453

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause…

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

May 25, 2021
Unscored —

CVE-2020-21041

Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a …

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

May 24, 2021
Unscored —

CVE-2020-21688

A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary c…

ffmpeg ffmpeg qtwebengine-opensource-src Debian Ubuntu

Aug 10, 2021
Unscored —

CVE-2020-21697

A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a de…

ffmpeg ffmpeg qtwebengine-opensource-src Debian Ubuntu

Aug 10, 2021
Unscored —

CVE-2020-22015

Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, wh…

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

May 26, 2021
Unscored —

CVE-2020-22016

A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might …

ffmpeg ffmpeg Debian Ubuntu

May 27, 2021
Unscored —

CVE-2020-22017

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which …

ffmpeg ffmpeg Debian Ubuntu

May 27, 2021
Unscored —

CVE-2020-22019

Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a re…

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

May 26, 2021
Unscored —

CVE-2020-22020

Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could …

ffmpeg ffmpeg Debian Ubuntu

May 26, 2021
Unscored —

CVE-2020-22021

Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remot…

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

May 26, 2021
Unscored —

CVE-2020-22022

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which m…

ffmpeg ffmpeg qtwebengine-opensource-src Debian Ubuntu

May 27, 2021
Unscored —

CVE-2020-22023

A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, whi…

ffmpeg ffmpeg Debian Ubuntu

May 27, 2021
Unscored —

CVE-2020-22025

A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to …

ffmpeg ffmpeg qtwebengine-opensource-src Debian Ubuntu

May 27, 2021
Unscored —

CVE-2020-22026

Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which coul…

ffmpeg ffmpeg Debian Ubuntu

May 26, 2021
Unscored —

CVE-2020-22027

A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might l…

ffmpeg ffmpeg Debian Ubuntu

May 27, 2021
Unscored —

CVE-2020-22028

Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could caus…

ffmpeg ffmpeg qtwebengine-opensource-src Debian Ubuntu

May 26, 2021
Unscored —

CVE-2020-22029

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_deriva…

ffmpeg ffmpeg Debian Ubuntu

May 27, 2021
Unscored —

CVE-2020-22030

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, wh…

ffmpeg ffmpeg qtwebengine-opensource-src Debian Ubuntu

May 27, 2021
Unscored —

CVE-2020-22031

A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, whi…

ffmpeg ffmpeg Debian Ubuntu

May 27, 2021
Unscored —

CVE-2020-22032

A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which mig…

ffmpeg ffmpeg qtwebengine-opensource-src Debian Ubuntu

May 27, 2021
Unscored —

CVE-2020-22033

A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, whic…

ffmpeg ffmpeg Debian Ubuntu

May 27, 2021
Unscored —

CVE-2020-22034

A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory …

ffmpeg ffmpeg Debian Ubuntu

May 27, 2021
Unscored —

CVE-2020-22035

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might …

ffmpeg ffmpeg qtwebengine-opensource-src Debian Ubuntu

Jun 1, 2021
Unscored —

CVE-2020-22036

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might …

ffmpeg ffmpeg qtwebengine-opensource-src Debian Ubuntu

Jun 1, 2021
Unscored —

CVE-2020-22037

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

Jun 1, 2021
Unscored —

CVE-2020-22042

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_fil…

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

Jun 1, 2021
Unscored —

CVE-2020-35965

decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when t…

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

Jan 4, 2021
Unscored —

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-20…

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

Aug 4, 2021
Unscored —

CVE-2021-38171

adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a …

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

Aug 21, 2021
Unscored —

CVE-2021-38291

FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion failure at src/libavut…

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

Aug 12, 2021
Unscored —

CVE-2022-1475

An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavc…

ffmpeg ffmpeg Debian Ubuntu

May 2, 2022

References

report
https://ubuntu.com/security/CVE-2020-20445
report
https://ubuntu.com/security/CVE-2020-20446
report
https://ubuntu.com/security/CVE-2020-20450
report
https://ubuntu.com/security/CVE-2020-20453
report
https://ubuntu.com/security/CVE-2020-21041
report
https://ubuntu.com/security/CVE-2020-21688
report
https://ubuntu.com/security/CVE-2020-21697
report
https://ubuntu.com/security/CVE-2020-22015
report
https://ubuntu.com/security/CVE-2020-22016
report
https://ubuntu.com/security/CVE-2020-22017
report
https://ubuntu.com/security/CVE-2020-22019
report
https://ubuntu.com/security/CVE-2020-22020
report
https://ubuntu.com/security/CVE-2020-22021
report
https://ubuntu.com/security/CVE-2020-22022
report
https://ubuntu.com/security/CVE-2020-22023
report
https://ubuntu.com/security/CVE-2020-22025
report
https://ubuntu.com/security/CVE-2020-22026
report
https://ubuntu.com/security/CVE-2020-22027
report
https://ubuntu.com/security/CVE-2020-22028
report
https://ubuntu.com/security/CVE-2020-22029
report
https://ubuntu.com/security/CVE-2020-22030
report
https://ubuntu.com/security/CVE-2020-22031
report
https://ubuntu.com/security/CVE-2020-22032
report
https://ubuntu.com/security/CVE-2020-22033
report
https://ubuntu.com/security/CVE-2020-22034
report
https://ubuntu.com/security/CVE-2020-22035
report
https://ubuntu.com/security/CVE-2020-22036
report
https://ubuntu.com/security/CVE-2020-22037
report
https://ubuntu.com/security/CVE-2020-22042
report
https://ubuntu.com/security/CVE-2020-35965
report
https://ubuntu.com/security/CVE-2021-38114
report
https://ubuntu.com/security/CVE-2021-38171
report
https://ubuntu.com/security/CVE-2021-38291
report
https://ubuntu.com/security/CVE-2022-1475

ffmpeg vulnerabilities

Summary

Fixed packages 3

Vulnerabilities 34

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a …

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause…

FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Den…

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause…

Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a …

A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary c…

A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a de…

Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, wh…

A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might …

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which …

Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a re…

Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could …

Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remot…

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which m…

A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, whi…

A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to …

Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which coul…

A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might l…

Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could caus…

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_deriva…

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, wh…

A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, whi…

A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which mig…

A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, whic…

A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory …

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in get_block_row at libavfilter/vf_bm3d.c, which might …

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might …

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_fil…

decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when t…

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-20…

adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a …

FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion failure at src/libavut…

An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavc…

References