Test ID:	1.3.6.1.4.1.25623.1.0.113706
Category:	Buffer overflow
Title:	FFmpeg <= 4.3 Buffer Overflow Vulnerability
Summary:	FFmpeg is prone to a heap-based buffer overflow vulnerability.
Description:	Summary: FFmpeg is prone to a heap-based buffer overflow vulnerability. Vulnerability Insight: The vulnerability exists in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.c calls ff_dnn_load_model_native and a certain index check is omitted. Vulnerability Impact: Successful exploitation would allow an attacker to crash the application or execute arbitrary code on the target machine. Affected Software/OS: FFmpeg through version 4.3. Solution: Update to version 4.4 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-14212 https://security.gentoo.org/glsa/202007-58 https://patchwork.ffmpeg.org/project/ffmpeg/list/?series=1463 https://trac.ffmpeg.org/ticket/8716
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.