CVE-2020-21688
A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.
Original description
The description as published by the source.
A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2020-21688 ffmpeg Fixed in: 7:4.4-5
- Ubuntu UBUNTU-CVE-2020-21688 ffmpeg Fixed in: 7:2.8.17-0ubuntu0.1+esm2
References
- advisory debian.org
- patch trac.ffmpeg.org