CVE-2020-35965

Name

CVE-2020-35965

Description

decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

References

Type	URI
Patch	https://github.com/FFmpeg/FFmpeg/commit/3e5959b3457f7f1856d997261e6ac672bba49e8b
Exploit	https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26532
Patch	https://github.com/FFmpeg/FFmpeg/commit/b0a8b40294ea212c1938348ff112ef1b9bf16bb3
Mailing List	https://lists.debian.org/debian-lts-announce/2021/01/msg00026.html
GENTOO	https://security.gentoo.org/glsa/202105-24
Third Party Advisory	https://www.debian.org/security/2021/dsa-4990

Match rules

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:ffmpeg:ffmpeg:4.3.1:::::::*`	ffmpeg	== None	== 4.3.1
`cpe:2.3:a:ffmpeg:ffmpeg::::::::`	ffmpeg	>= 4.3.1	< 4.4

Vulnerable and fixed packages

Source package	Branch	Version	Maintainer	Status
ffmpeg	3.13-community	4.3.1-r4	Natanael Copa <ncopa@alpinelinux.org>	fixed