Unscored CVE-2020-24995 EUVD-2020-17695GHSA-jcg4-7x25-pqcr

Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary c…

Published Mar 30, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Buffer overflow vulnerability in sniff_channel_order function in aacdec_template.c in ffmpeg 3.1.2, allows attackers to execute arbitrary code (local).

References

https://trac.ffmpeg.org/ticket/8845
https://trac.ffmpeg.org/ticket/8859
https://trac.ffmpeg.org/ticket/8860
http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d6f293353c94c7ce200f6e0975ae3de49787f91f