Wind River Support Network

HomeDefectsLIN1021-1126

Fixed

LIN1021-1126 : Security Advisory - ffmpeg - CVE-2020-21690

Created: Aug 10, 2021 Updated: Nov 10, 2023

Resolved Date: Oct 8, 2021

Found In Version: 10.21.20.1

Fix Version: 10.21.20.6

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

A memory leak in the grow_array function in cmdutils.c og Ffmpeg 4.2 allows attackers to cause a denial of service (DOS) via a crafted ogg file.

CREATE(Triage):(User=admin) CVE-2020-21690 (https://nvd.nist.gov/vuln/detail/CVE-2020-21690)

CVEs

CVE-2020-21690