Security Advisory

CVE-2020-13904

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-06-07 18:07:08

Last updated 2024-08-04 12:32:14

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.

← Browse all CVEs View on cve.org ↗