CVE-2020-12284

State: Published
Severity: Not scored
Published: Apr 28, 2020
Updated: Aug 4, 2024
Reserved: Apr 28, 2020

Description

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/FFmpeg/FFmpeg/commit/1812352d767ccf5431aa440123e2e260a4db2726
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19734
DSA-4722vendor-advisory
USN-4431-1vendor-advisory
GLSA-202007-58vendor-advisory
https://github.com/FFmpeg/FFmpeg/commit/a3a3730b5456ca00587455004d40c047f7b20a99

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.