CVE-2020-22048

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2

Description A Denial of Service issue exists due to a memory leak in the ff frame pool get function in framepool.c. This is caused by incorrect memory release before removing the last reference. Exploitation of this issue allows a remote attacker to cause a denial of service.

Recommendations For FFmpeg version 4.2, as a temporary workaround, consider disabling the ff frame pool get function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.