What’s Vulnerable › Vulnerabilities

CVE-2020-20902

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-20 · updated 2026-06-17
• Weakness: CWE-125

Description

A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that could result in disclosure of information.

Affected products

• FFmpeg: 4.2.1

References

• http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=0c61661a2cbe1b8b284c80ada1c2fdddf4992cad
• https://trac.ffmpeg.org/ticket/8176
• http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=0c61661a2cbe1b8b284c80ada1c2fdddf4992cad
• https://trac.ffmpeg.org/ticket/8176

Get alerted when CVE-2020-20902 or the next vulnerability affects your stack