CVE-2020-13904

 

Published at: - 07-06-2020 09:15

Last modified: - 07-10-2022 03:27

Total changes: - 2

Description

FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://patchwork.ffmpeg.org/project/ffmpeg/patch/20200529033905.41926-1-lq@chinaffmpeg.org/
• https://trac.ffmpeg.org/ticket/8673
• DSA-4722-Third Party Advisory
• [debian-lts-announce] 20200727 [SECURITY] [DLA 2291-1] ffmpeg security update-Mailing List, Third Party Advisory
• USN-4431-1-Third Party Advisory
• GLSA-202007-58-Third Party Advisory
• https://github.com/FFmpeg/FFmpeg/commit/6959358683c7533f586c07a766acc5fe9544d8b2

 

Keywords

NVD

 

CVE-2020-13904

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures