{
  "fix": "ffmpeg 7:3.4.11-0ubuntu0.1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-ffmpeg-7-3.4.11-0ubuntu0.1",
  "summary": "ffmpeg 7:3.4.11-0ubuntu0.1, released August 11, 2023, fixes 31 CVEs in ffmpeg. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "ffmpeg 7:3.4.11-0ubuntu0.1 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2023-08-11T07:15:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 31 CVEs, none high severity",
  "supported": false,
  "cveCount": 31,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.03567,
  "maxCvss": 5.5,
  "appliesTo": [
    {
      "product": "ffmpeg",
      "productUrl": "https://patchblox.com/security/product/linux/ffmpeg",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "7:3.4.11-0ubuntu0.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2020-22015",
      "url": "https://patchblox.com/security/cve/CVE-2020-22015",
      "title": "ffmpeg: Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c,...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03567,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-38291",
      "url": "https://patchblox.com/security/cve/CVE-2021-38291",
      "title": "ffmpeg: Fixed an assertion failure at src/libavutil/mathematics.c (bsc#1189428)",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0269,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-38171",
      "url": "https://patchblox.com/security/cve/CVE-2021-38171",
      "title": "ffmpeg: adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-35965",
      "url": "https://patchblox.com/security/cve/CVE-2020-35965",
      "title": "ffmpeg: decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0231,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-21041",
      "url": "https://patchblox.com/security/cve/CVE-2020-21041",
      "title": "ffmpeg: Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02068,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22025",
      "url": "https://patchblox.com/security/cve/CVE-2020-22025",
      "title": "ffmpeg: A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead t...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22032",
      "url": "https://patchblox.com/security/cve/CVE-2020-22032",
      "title": "ffmpeg: A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which m...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-20453",
      "url": "https://patchblox.com/security/cve/CVE-2020-20453",
      "title": "ffmpeg: FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cau...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01777,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-21688",
      "url": "https://patchblox.com/security/cve/CVE-2020-21688",
      "title": "ffmpeg: A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01734,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-20446",
      "url": "https://patchblox.com/security/cve/CVE-2020-20446",
      "title": "ffmpeg: FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cau...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.0173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22036",
      "url": "https://patchblox.com/security/cve/CVE-2020-22036",
      "title": "ffmpeg: A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which migh...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01727,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22028",
      "url": "https://patchblox.com/security/cve/CVE-2020-22028",
      "title": "ffmpeg: Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could ca...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01709,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22031",
      "url": "https://patchblox.com/security/cve/CVE-2020-22031",
      "title": "ffmpeg: A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, w...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01687,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22021",
      "url": "https://patchblox.com/security/cve/CVE-2020-22021",
      "title": "ffmpeg-4: Fixed Buffer Overflow vulnerability in filter_edges function in libavfilter/vf_yadif.c (bsc#1186586)",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01681,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-20445",
      "url": "https://patchblox.com/security/cve/CVE-2020-20445",
      "title": "ffmpeg: FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01649,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22034",
      "url": "https://patchblox.com/security/cve/CVE-2020-22034",
      "title": "ffmpeg: A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memor...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01624,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22016",
      "url": "https://patchblox.com/security/cve/CVE-2020-22016",
      "title": "ffmpeg: A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which migh...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01605,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22022",
      "url": "https://patchblox.com/security/cve/CVE-2020-22022",
      "title": "ffmpeg: A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01605,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22037",
      "url": "https://patchblox.com/security/cve/CVE-2020-22037",
      "title": "libavcodec-extra57: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01599,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22020",
      "url": "https://patchblox.com/security/cve/CVE-2020-22020",
      "title": "ffmpeg: Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which coul...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01516,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22033",
      "url": "https://patchblox.com/security/cve/CVE-2020-22033",
      "title": "ffmpeg: A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, wh...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01499,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22023",
      "url": "https://patchblox.com/security/cve/CVE-2020-22023",
      "title": "ffmpeg: A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, w...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01459,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22017",
      "url": "https://patchblox.com/security/cve/CVE-2020-22017",
      "title": "ffmpeg: A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, whic...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01425,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22026",
      "url": "https://patchblox.com/security/cve/CVE-2020-22026",
      "title": "ffmpeg: Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which co...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01366,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-20451",
      "url": "https://patchblox.com/security/cve/CVE-2020-20451",
      "title": "libavutil56: Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.",
      "priority": "Routine",
      "severity": "Negligible",
      "epss": 0.01347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22019",
      "url": "https://patchblox.com/security/cve/CVE-2020-22019",
      "title": "ffmpeg: Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0109,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-38114",
      "url": "https://patchblox.com/security/cve/CVE-2021-38114",
      "title": "libavutil55: libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00989,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22042",
      "url": "https://patchblox.com/security/cve/CVE-2020-22042",
      "title": "ffmpeg: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_f...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00928,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-21697",
      "url": "https://patchblox.com/security/cve/CVE-2020-21697",
      "title": "ffmpeg: A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0092,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-22041",
      "url": "https://patchblox.com/security/cve/CVE-2020-22041",
      "title": "ffmpeg: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags funct...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00902,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-28429",
      "url": "https://patchblox.com/security/cve/CVE-2021-28429",
      "title": "ffmpeg: Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows loc...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}