CVE-2020-22040

libavfilter-extra6: A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c.

CVE-2020-22040 is fixed in 25 products on 1 platform, first by ffmpeg 7:3.4.11-0ubuntu0.1+esm2, released June 2, 2021. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0103
63rd percentile

A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c.

Where it's fixed

ProductFixed inFixReleased
Linux
ffmpeg · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 ffmpeg 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
ffmpeg · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 ffmpeg 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libavcodec-extra · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libavcodec-extra 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libavcodec-extra · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libavcodec-extra 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libavcodec-extra57 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libavcodec-extra57 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libavcodec-extra58 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libavcodec-extra58 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libavcodec57 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libavcodec57 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libavcodec58 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libavcodec58 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libavdevice57 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libavdevice57 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libavdevice58 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libavdevice58 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libavfilter-extra · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libavfilter-extra 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libavfilter-extra · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libavfilter-extra 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libavfilter-extra6 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libavfilter-extra6 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libavfilter-extra7 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libavfilter-extra7 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libavfilter6 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libavfilter6 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libavfilter7 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libavfilter7 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libavformat57 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libavformat57 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libavformat58 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libavformat58 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libavresample3 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libavresample3 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libavresample4 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libavresample4 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libavutil55 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libavutil55 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libavutil56 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libavutil56 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libpostproc54 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libpostproc54 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libpostproc55 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libpostproc55 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libswresample2 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libswresample2 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libswresample3 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libswresample3 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021
libswscale4 · Ubuntu 18.04.6 LTS (bionic) 7:3.4.11-0ubuntu0.1+esm2 libswscale4 7:3.4.11-0ubuntu0.1+esm2 Jun 2, 2021
libswscale5 · Ubuntu 20.04 LTS (focal) 7:4.2.7-0ubuntu0.1+esm2 libswscale5 7:4.2.7-0ubuntu0.1+esm2 Jun 2, 2021

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.