ID CVE-2020-35964
Summary track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing.
References
Vulnerable Configurations
  • cpe:2.3:a:ffmpeg:ffmpeg:4.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:ffmpeg:ffmpeg:4.3.1:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 06-08-2022 - 03:23)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
refmap via4
misc
Last major update 06-08-2022 - 03:23
Published 03-01-2021 - 19:15
Last modified 06-08-2022 - 03:23
Back to Top