USN-6449-1: ffmpeg Ubuntu
Vulnerability summary
USN-6449-1 is a vulnerability in ffmpeg Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 8 · Downstream 0 · Related 8Timeline
- 24-10-2023PublishedVulnerability first disclosed.
- 27-04-2026Last modifiedVulnerability information updated.
Description
ffmpeg vulnerabilities It was discovered that FFmpeg incorrectly managed memory resulting in a memory leak. An attacker could possibly use this issue to cause a denial of service via application crash. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-22038) It was discovered that FFmpeg incorrectly handled certain input files, leading to an integer overflow. An attacker could possibly use this issue to cause a denial of service via application crash. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-20898, CVE-2021-38090, CVE-2021-38091, CVE-2021-38092, CVE-2021-38093, CVE-2021-38094) It was discovered that FFmpeg incorrectly managed memory, resulting in a memory leak. If a user or automated system were tricked into processing a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. (CVE-2022-48434)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- ffmpeg< 7:3.4.11-0ubuntu0.1+esm3 | < 7:4.2.7-0ubuntu0.1+esm3 | < 7:4.4.2-0ubuntu0.22.04.1+esm2
1 vendor · 1 product