Wind River Support Network

HomeDefectsLIN1021-1125

Fixed

LIN1021-1125 : Security Advisory - ffmpeg - CVE-2020-21688

Created: Aug 10, 2021 Updated: Aug 6, 2022

Resolved Date: Aug 6, 2022

Found In Version: 10.21.20.1

Fix Version: 10.21.20.14

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.

CREATE(Triage):(User=admin) CVE-2020-21688 (https://nvd.nist.gov/vuln/detail/CVE-2020-21688)

CVEs

CVE-2020-21688