Wind River Support Network

HomeDefectsLIN1019-6978
Fixed

LIN1019-6978 : Security Advisory - ffmpeg - CVE-2020-21688

Created: Aug 10, 2021    Updated: Sep 9, 2021
Resolved Date: Sep 7, 2021
Found In Version: 10.19.45.1
Fix Version: 10.19.45.19
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.

CREATE(Triage):(User=admin) [CVE-2020-21688|https://nvd.nist.gov/vuln/detail/CVE-2020-21688]

CVEs


Live chat
Online