Approved changes feed: RSS · Atom

cpe:2.3:a:ffmpeg:ffmpeg:4.2.2:*:*:*:*:*:*:*

part: a version: 4.2.2 update: *

VendorFfmpeg (4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f)
ProductFfmpeg (69475a2d-e046-5b0f-b6da-299c42a85e87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ffmpeg purl2cpe 2026-06-01 10:12:29.448897
pkg:deb/ubuntu/ffmpeg purl2cpe 2026-06-01 10:12:29.448898
pkg:ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.448900
pkg:github/ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.448901
pkg:opensuse/ffmpeg purl2cpe 2026-06-01 10:12:29.448903

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-12284 vulnerable 2026-06-08 05:17:56.831915 Details available
cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.
Published: 2020-04-28T05:16:43.000Z
Updated: 2024-08-04T11:48:58.777Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.