CVE-2020-22038

ffmpeg: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context functio...

CVE-2020-22038 is fixed in 25 products on 1 platform, first by ffmpeg 7:3.4.11-0ubuntu0.1+esm3, released March 29, 2023. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0101
63rd percentile

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c.

Where it's fixed

ProductFixed inFixReleased
Linux
ffmpeg · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 ffmpeg 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
ffmpeg · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 ffmpeg 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libavcodec-extra · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libavcodec-extra 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libavcodec-extra · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libavcodec-extra 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libavcodec-extra57 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libavcodec-extra57 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libavcodec-extra58 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libavcodec-extra58 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libavcodec57 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libavcodec57 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libavcodec58 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libavcodec58 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libavdevice57 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libavdevice57 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libavdevice58 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libavdevice58 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libavfilter-extra · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libavfilter-extra 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libavfilter-extra · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libavfilter-extra 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libavfilter-extra6 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libavfilter-extra6 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libavfilter-extra7 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libavfilter-extra7 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libavfilter6 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libavfilter6 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libavfilter7 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libavfilter7 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libavformat57 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libavformat57 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libavformat58 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libavformat58 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libavresample3 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libavresample3 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libavresample4 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libavresample4 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libavutil55 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libavutil55 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libavutil56 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libavutil56 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libpostproc54 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libpostproc54 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libpostproc55 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libpostproc55 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libswresample2 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libswresample2 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libswresample3 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libswresample3 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023
libswscale4 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm3 libswscale4 7:3.4.11-0ubuntu0.1+esm3 Mar 29, 2023
libswscale5 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm3 libswscale5 7:4.2.7-0ubuntu0.1+esm3 Mar 29, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.