# CVE-2020-22017: ffmpeg: A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, whic... CVE-2020-22017 is fixed in 25 products on 1 platform, first by ffmpeg 7:3.4.11-0ubuntu0.1, released August 11, 2023. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2020-22017 - Priority: Routine - CVSS: n/a (Medium) - EPSS: 0.0143 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: May 27, 2021 ## Description A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | ffmpeg Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [ffmpeg 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ffmpeg-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | ffmpeg Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [ffmpeg 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ffmpeg-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavcodec-extra Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavcodec-extra 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec-extra-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavcodec-extra Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libavcodec-extra 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavcodec-extra-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavcodec-extra57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavcodec-extra57 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec-extra57-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavcodec-extra58 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libavcodec-extra58 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavcodec-extra58-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavcodec57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavcodec57 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavcodec57-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavcodec58 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libavcodec58 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavcodec58-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavdevice57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavdevice57 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavdevice57-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavdevice58 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libavdevice58 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavdevice58-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavfilter-extra Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavfilter-extra 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter-extra-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavfilter-extra Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libavfilter-extra 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavfilter-extra-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavfilter-extra6 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavfilter-extra6 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter-extra6-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavfilter-extra7 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libavfilter-extra7 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavfilter-extra7-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavfilter6 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavfilter6 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavfilter6-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavfilter7 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libavfilter7 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavfilter7-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavformat57 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavformat57 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavformat57-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavformat58 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libavformat58 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavformat58-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavresample3 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavresample3 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavresample3-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavresample4 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libavresample4 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavresample4-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavutil55 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libavutil55 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libavutil55-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libavutil56 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libavutil56 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libavutil56-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libpostproc54 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libpostproc54 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpostproc54-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libpostproc55 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libpostproc55 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libpostproc55-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libswresample2 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libswresample2 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libswresample2-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libswresample3 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libswresample3 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libswresample3-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libswscale4 Ubuntu 18.04.6 LTS (bionic) | 7:3.4.11-0ubuntu0.1 | [libswscale4 7:3.4.11-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libswscale4-7-3.4.11-0ubuntu0.1.md) | Aug 11, 2023 | | Linux | libswscale5 Ubuntu 20.04 LTS (focal) | 7:4.2.7-0ubuntu0.1 | [libswscale5 7:4.2.7-0ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libswscale5-7-4.2.7-0ubuntu0.1.md) | Aug 11, 2023 | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo