High severity8.8NVD Advisory· Published Jun 16, 2020· Updated Jun 17, 2026

CVE-2020-14212

Description

FFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.c calls ff_dnn_load_model_native and a certain index check is omitted.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FFmpeg/Ffmpeg2 versions
cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*range: >=4.3,<4.3.1
- (no CPE)range: <=4.3
FFmpeg/FFmpegdescription

Patches

Vulnerability mechanics

References

trac.ffmpeg.org/ticket/8716nvdPatchVendor Advisory
patchwork.ffmpeg.org/project/ffmpeg/list/nvdNot ApplicableVendor Advisory
security.gentoo.org/glsa/202007-58nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000