← All advisories

Medium severity6.5NVD Advisory· Published Jan 3, 2021· Updated Jun 17, 2026

CVE-2020-35964

CVE-2020-35964

Description

track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

FFmpeg/Ffmpeg2 versions
cpe:2.3:a:ffmpeg:ffmpeg:4.3.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ffmpeg:ffmpeg:4.3.1:*:*:*:*:*:*:*
- (no CPE)range: =4.3.1
FFmpeg/FFmpegdescription
osv-coords
pkg:rpm/opensuse/ffmpeg-4&distro=openSUSE%20Tumbleweed
Range: < 4.4-5.2

Patches

Vulnerability mechanics

References

3

github.com/FFmpeg/FFmpeg/commit/27a99e2c7d450fef15594671eef4465c8a166bd7nvdPatchThird Party Advisory
bugs.chromium.org/p/oss-fuzz/issues/detailnvdExploitIssue TrackingThird Party Advisory
security.gentoo.org/glsa/202105-24nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.