CVE-2020-12284

Name of the Vulnerable Software and Affected Versions FFmpeg versions 4.1 through 4.2.2

Description The issue is related to a heap-based buffer overflow in the cbs jpeg split fragment function during JPEG MARKER SOS handling due to a missing length check. This can lead to a denial of service. The vulnerability can be exploited by a remote attacker.

Recommendations For FFmpeg versions 4.1 through 4.2.2, consider updating to a newer version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.