# CVE-2020-22016: ffmpeg: A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which migh...

CVE-2020-22016 is fixed in 25 products on 1 platform, first by ffmpeg 7:4.2.4-1ubuntu0.1, released June 2, 2021. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2020-22016
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0161
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 27, 2021

## Description

A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might lead to memory corruption and other potential consequences.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | ffmpeg Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [ffmpeg 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ffmpeg-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | ffmpeg Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [ffmpeg 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ffmpeg-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libavcodec-extra Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavcodec-extra 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec-extra-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libavcodec-extra Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libavcodec-extra 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavcodec-extra-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libavcodec-extra57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavcodec-extra57 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec-extra57-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libavcodec-extra58 Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libavcodec-extra58 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavcodec-extra58-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libavcodec57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavcodec57 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec57-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libavcodec58 Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libavcodec58 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavcodec58-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libavdevice57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavdevice57 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavdevice57-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libavdevice58 Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libavdevice58 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavdevice58-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libavfilter-extra Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavfilter-extra 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter-extra-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libavfilter-extra Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libavfilter-extra 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavfilter-extra-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libavfilter-extra6 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavfilter-extra6 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter-extra6-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libavfilter-extra7 Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libavfilter-extra7 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavfilter-extra7-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libavfilter6 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavfilter6 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter6-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libavfilter7 Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libavfilter7 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavfilter7-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libavformat57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavformat57 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavformat57-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libavformat58 Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libavformat58 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavformat58-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libavresample3 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavresample3 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavresample3-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libavresample4 Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libavresample4 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavresample4-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libavutil55 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavutil55 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavutil55-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libavutil56 Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libavutil56 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavutil56-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libpostproc54 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libpostproc54 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpostproc54-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libpostproc55 Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libpostproc55 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libpostproc55-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libswresample2 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libswresample2 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libswresample2-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libswresample3 Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libswresample3 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libswresample3-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |
| Linux | libswscale4 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libswscale4 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libswscale4-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 |
| Linux | libswscale5 Ubuntu 20.04 LTS (focal) | 7:4.2.4-1ubuntu0.1 | [libswscale5 7:4.2.4-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libswscale5-7-4.2.4-1ubuntu0.1.md) | Jun 2, 2021 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
