PT-2019-6402

CVE-2020-20451

·

Published

2019-08-26

·

Updated

2026-06-05

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions FFmpeg version 4.2
Description The issue is related to a component of the FFmpeg multimedia library, specifically fftools/cmdutils.c, which is associated with incorrect memory deallocation before removing the last reference. This allows a remote attacker to cause a denial of service. The problem stems from resource management errors.
Recommendations For FFmpeg version 4.2, consider applying configuration changes or workarounds to minimize the risk of exploitation, such as restricting access to resources that could be affected by the denial of service issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2019-2678
DLA-2818-1
OESA-2026-2595
OESA-2026-2596
OPENSUSE-SU-2021:2322-1
OPENSUSE-SU-2021_2322-1
SUSE-SU-2021:2322-1
SUSE-SU-2021:2929-1
USN-5167-1
Found an issue in the description? Have something to add? Feel free to write us 👾