CVE-2020-35965

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3.1

Description The issue is related to the decode frame function in the libavcodec/exr.c component, which has an out-of-bounds write due to errors in calculations. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For FFmpeg version 4.3.1, consider updating to a newer version that contains a fix for this issue, as the current version has a flawed decode frame function in libavcodec/exr.c. At the moment, there is no information about a newer version that contains a fix for this vulnerability.