What’s Vulnerable › Vulnerabilities

CVE-2020-20896

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-09-20 · updated 2026-06-17
• Weakness: CWE-476

Description

An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference.

Affected products

• FFmpeg: 4.2.1

References

• https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/dd01947397b98e94c3f2a79d5820aaf4594f4d3b
• https://trac.ffmpeg.org/ticket/8273
• https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/dd01947397b98e94c3f2a79d5820aaf4594f4d3b
• https://trac.ffmpeg.org/ticket/8273

Get alerted when CVE-2020-20896 or the next vulnerability affects your stack