CVE-2020-14212

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.3

Description The issue is related to a heap-based buffer overflow in the avio get str function located in libavformat/aviobuf.c. This overflow occurs because dnn backend native.c calls ff dnn load model native and a specific index check is omitted, leading to the overflow.

Recommendations For FFmpeg versions prior to 4.3, update to version 4.3 or later to resolve the issue.