CVE-2020-21041 - Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service

Back Back to CVE browser

HIGH

Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service

Published May 24, 2021

7.5

HIGH

CVSS 3.1

EPSS 2.07%

Description

Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-13820
Advisory
https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://trac.ffmpeg.org/ticket/7989
x_refsource_MISCExploitPatchVendor Advisory
https://www.debian.org/security/2021/dsa-4990
vendor-advisoryx_refsource_DEBIANThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-13820		Advisory
https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://trac.ffmpeg.org/ticket/7989		x_refsource_MISCExploitPatchVendor Advisory
https://www.debian.org/security/2021/dsa-4990		vendor-advisoryx_refsource_DEBIANThird Party Advisory