CVE-2020-22015 - Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code

Back Back to CVE browser

HIGH

Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code

Published May 26, 2021

8.8

HIGH

CVSS 3.1

EPSS 3.57%

Description

Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial of Service, or execute arbitrary code.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (3)

https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://trac.ffmpeg.org/ticket/8190
x_refsource_MISCExploitVendor Advisory
https://www.debian.org/security/2021/dsa-4990
vendor-advisoryx_refsource_DEBIANThird Party Advisory

Link	Providers	Tags
https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://trac.ffmpeg.org/ticket/8190		x_refsource_MISCExploitVendor Advisory
https://www.debian.org/security/2021/dsa-4990		vendor-advisoryx_refsource_DEBIANThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 26, 2021

Updated Aug 4, 2024

Reserved Aug 13, 2020

Link CVE-2020-22015

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-22015

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-22015