FFmpeg 4.2.3
Approved changes feed: RSS · Atom
cpe:2.3:a:ffmpeg:ffmpeg:4.2.3:*:*:*:*:*:*:*
part: a version: 4.2.3 update: *
| Vendor | Ffmpeg (4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f) |
|---|---|
| Product | Ffmpeg (69475a2d-e046-5b0f-b6da-299c42a85e87) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448904 |
pkg:deb/ubuntu/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448905 |
pkg:ffmpeg/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448907 |
pkg:github/ffmpeg/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448908 |
pkg:opensuse/ffmpeg |
purl2cpe | 2026-06-01 10:12:29.448910 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-24020 |
vulnerable | 2026-06-08 05:22:32.266620 |
Details available
Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code.
Published: 2021-05-26T14:36:15.000Z
Updated: 2024-08-04T15:05:11.795Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13904 |
vulnerable | 2026-06-08 05:18:01.314018 |
Details available
FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.
Published: 2020-06-07T18:07:08.000Z
Updated: 2024-08-04T12:32:14.480Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.